General

  • Target

    4e014214d69247df256984de53fc6fe3

  • Size

    123KB

  • Sample

    240109-lyeqfsdhgj

  • MD5

    4e014214d69247df256984de53fc6fe3

  • SHA1

    56fa5d1dabbb2d1e55b1f00421d054cdabfbdac9

  • SHA256

    a22ebc979e154c55dae45fa2d4db02608ccf4244fe051f53fa11d0eb2cf4a85d

  • SHA512

    eac5b165e5d1d2115b9c81d80e6a2b7047ad229c3f2e582d8ef9f440277b507d4d19ec4654b653d0c6222a892f2a75dfbc481c917d5173fdbdae03f019cfd350

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpZ+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8E3+Dw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.39.50:555

Targets

    • Target

      4e014214d69247df256984de53fc6fe3

    • Size

      123KB

    • MD5

      4e014214d69247df256984de53fc6fe3

    • SHA1

      56fa5d1dabbb2d1e55b1f00421d054cdabfbdac9

    • SHA256

      a22ebc979e154c55dae45fa2d4db02608ccf4244fe051f53fa11d0eb2cf4a85d

    • SHA512

      eac5b165e5d1d2115b9c81d80e6a2b7047ad229c3f2e582d8ef9f440277b507d4d19ec4654b653d0c6222a892f2a75dfbc481c917d5173fdbdae03f019cfd350

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpZ+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8E3+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks