General

  • Target

    b58ea92c95fbdac66443969f03b22e88

  • Size

    203KB

  • Sample

    231220-p9bdyscfdl

  • MD5

    b58ea92c95fbdac66443969f03b22e88

  • SHA1

    405476ede399275cf163473c3be538571d8198c8

  • SHA256

    75f355c2008c5eaf57238029928bc26e6fcc0b9201bfb8ea45aa22aa9c4b7b06

  • SHA512

    be7db771399346edde311e38e6d43a9f4b1a6ba2efeabe7f5a575b352e70f907bcc6924e563bf7e939f9d76c8d787cabea0f145273218b04905e30150102b3b2

  • SSDEEP

    3072:lvEDigYQ9ACfN+MIjkWX4dT6+IYuyIJWtT9raedxGz2KP9LKO4VmNZKhu4FCtZp2:lvEDVK3BaL2gfDAu9n/1qxFmyN4942Yk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

173.212.234.54:2545

Targets

    • Target

      b58ea92c95fbdac66443969f03b22e88

    • Size

      203KB

    • MD5

      b58ea92c95fbdac66443969f03b22e88

    • SHA1

      405476ede399275cf163473c3be538571d8198c8

    • SHA256

      75f355c2008c5eaf57238029928bc26e6fcc0b9201bfb8ea45aa22aa9c4b7b06

    • SHA512

      be7db771399346edde311e38e6d43a9f4b1a6ba2efeabe7f5a575b352e70f907bcc6924e563bf7e939f9d76c8d787cabea0f145273218b04905e30150102b3b2

    • SSDEEP

      3072:lvEDigYQ9ACfN+MIjkWX4dT6+IYuyIJWtT9raedxGz2KP9LKO4VmNZKhu4FCtZp2:lvEDVK3BaL2gfDAu9n/1qxFmyN4942Yk

    Score
    7/10
    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks