General

  • Target

    1fccceec318597a415e2d7c6c4413138

  • Size

    90KB

  • Sample

    231230-3a7j1abfhk

  • MD5

    1fccceec318597a415e2d7c6c4413138

  • SHA1

    1922ef1975da6e9c90df0be8baeb773ac3c38893

  • SHA256

    6ecb0626ec76c63783bba100b9c3bfd30efcec4342f65fb7ae10fe88dc0d50b3

  • SHA512

    acb437e6f0557c0a301ba783ce55384c4c8930d2da15030542d1628a3a22d01983e88ab5b76fb9e6788fd3e63fde9132b35186dadf1e335dd4be89bddae8ff9f

  • SSDEEP

    1536:3qbFN4P6jdJmkfosSfq1iP/vbxHO9lXPz5YdmZCmREqQ4b/X7XSee:W4cJdp1mb0XPz+dbmREqQ4bv7XSee

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

46.101.74.107:1111

Targets

    • Target

      1fccceec318597a415e2d7c6c4413138

    • Size

      90KB

    • MD5

      1fccceec318597a415e2d7c6c4413138

    • SHA1

      1922ef1975da6e9c90df0be8baeb773ac3c38893

    • SHA256

      6ecb0626ec76c63783bba100b9c3bfd30efcec4342f65fb7ae10fe88dc0d50b3

    • SHA512

      acb437e6f0557c0a301ba783ce55384c4c8930d2da15030542d1628a3a22d01983e88ab5b76fb9e6788fd3e63fde9132b35186dadf1e335dd4be89bddae8ff9f

    • SSDEEP

      1536:3qbFN4P6jdJmkfosSfq1iP/vbxHO9lXPz5YdmZCmREqQ4b/X7XSee:W4cJdp1mb0XPz+dbmREqQ4bv7XSee

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks