General

  • Target

    8a0a9cf0d8fa8c3e5526bd1488011b37

  • Size

    106KB

  • Sample

    231220-gqde7segfj

  • MD5

    8a0a9cf0d8fa8c3e5526bd1488011b37

  • SHA1

    610ffd8225a9aee1c75ee17d92c73dd5616081c5

  • SHA256

    311a711da7c173fd72e1d547a143a312e6e03fec289135c86a697d223457aef8

  • SHA512

    d6e3b3c65dca588af059dd45509183ce5dc4140502d2b5d220925dcc3f082232e0457b478f85baebf8a11d61e654cd69da9f524eccd19661372608f9495cadf6

  • SSDEEP

    3072:19AS8f554ThcnD7R2OlXQKJ0vWpYXxxCQ6rGGuQTXW:c23KJ0vTXxxCQ6r1uQTXW

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

46.29.164.93:626

Targets

    • Target

      8a0a9cf0d8fa8c3e5526bd1488011b37

    • Size

      106KB

    • MD5

      8a0a9cf0d8fa8c3e5526bd1488011b37

    • SHA1

      610ffd8225a9aee1c75ee17d92c73dd5616081c5

    • SHA256

      311a711da7c173fd72e1d547a143a312e6e03fec289135c86a697d223457aef8

    • SHA512

      d6e3b3c65dca588af059dd45509183ce5dc4140502d2b5d220925dcc3f082232e0457b478f85baebf8a11d61e654cd69da9f524eccd19661372608f9495cadf6

    • SSDEEP

      3072:19AS8f554ThcnD7R2OlXQKJ0vWpYXxxCQ6rGGuQTXW:c23KJ0vTXxxCQ6r1uQTXW

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks