General

  • Target

    8249848bc19a71ee3c782ad84111f520

  • Size

    191KB

  • Sample

    231220-ekcwdaebf8

  • MD5

    8249848bc19a71ee3c782ad84111f520

  • SHA1

    ede4bf714b06770bd4b58a66ad0c532ee83b363f

  • SHA256

    8c18606de3e65f51fabe319cdac24ce325c8dd46dca1e5c1f74d9761a87e92c4

  • SHA512

    6fe413b825332270889330d6820187cd9ba8d194f238f2337f3c8871187d89c45961aa1ea1bc158e8439107c8f2550c92befa1cf7a8610f928e707e90d7f9324

  • SSDEEP

    3072:NgO4HGXq11zXqwL5ScNZf1t3aLUUGPNxibtNf8eNgJs12lhvc5PsEsEUxxQLzJlL:NRt7+7I19pEblQoZCQ9gOS1SeX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.83.163.78:23

Targets

    • Target

      8249848bc19a71ee3c782ad84111f520

    • Size

      191KB

    • MD5

      8249848bc19a71ee3c782ad84111f520

    • SHA1

      ede4bf714b06770bd4b58a66ad0c532ee83b363f

    • SHA256

      8c18606de3e65f51fabe319cdac24ce325c8dd46dca1e5c1f74d9761a87e92c4

    • SHA512

      6fe413b825332270889330d6820187cd9ba8d194f238f2337f3c8871187d89c45961aa1ea1bc158e8439107c8f2550c92befa1cf7a8610f928e707e90d7f9324

    • SSDEEP

      3072:NgO4HGXq11zXqwL5ScNZf1t3aLUUGPNxibtNf8eNgJs12lhvc5PsEsEUxxQLzJlL:NRt7+7I19pEblQoZCQ9gOS1SeX

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks