General

  • Target

    888872e676156b79da9f62d0e1ef4a02

  • Size

    110KB

  • Sample

    231220-gcxa6ahce7

  • MD5

    888872e676156b79da9f62d0e1ef4a02

  • SHA1

    8c150846e5da9f098d2ba994928bded55db2da97

  • SHA256

    a77a6db459f11486477605a9f5d2c8bc708c8ee7873bfc5833b3fd6ea5aca64a

  • SHA512

    75a8e8bb53af73ab7286ad9377ad3d611886f831efe4d949c23c209347712fc617669cc796d94b72ac350f719688ed4c33918787f6df33041ede9cab719d6d2f

  • SSDEEP

    1536:Z7j+1T6Bq+bkYQE2rKhpWx5nZLTv8LrGV6eCNo+4sFlR7CimWt0zFufCy/02vI:kALOnZHErG+2+4ulgimWOzFufJ02vI

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

142.11.217.88:51351

Targets

    • Target

      888872e676156b79da9f62d0e1ef4a02

    • Size

      110KB

    • MD5

      888872e676156b79da9f62d0e1ef4a02

    • SHA1

      8c150846e5da9f098d2ba994928bded55db2da97

    • SHA256

      a77a6db459f11486477605a9f5d2c8bc708c8ee7873bfc5833b3fd6ea5aca64a

    • SHA512

      75a8e8bb53af73ab7286ad9377ad3d611886f831efe4d949c23c209347712fc617669cc796d94b72ac350f719688ed4c33918787f6df33041ede9cab719d6d2f

    • SSDEEP

      1536:Z7j+1T6Bq+bkYQE2rKhpWx5nZLTv8LrGV6eCNo+4sFlR7CimWt0zFufCy/02vI:kALOnZHErG+2+4ulgimWOzFufJ02vI

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks