General

  • Target

    IObeENwjarm5

  • Size

    208KB

  • Sample

    240201-shpdaaabhj

  • MD5

    02e8929813570f32ccd84df7363f99cb

  • SHA1

    a753fcf0ff1cdefde8a2dbe6654f94416f30240a

  • SHA256

    180989d6d886af835ae4584b6047fe4887dedb4a875438d0d124f72aaa29caef

  • SHA512

    532d177b9c04d0bd28f0ba14e09a7c97402c9231637e4ba17aae1a97bb32fee6a17f463cfef950d119b74ec94fa51e445dab96d4a6d435275bf566ba88bcbd8a

  • SSDEEP

    6144:kfteTTU4z8LGg+Wih0DuO+H8yv949o6XwIqcBm:KtyTXzyjkKa6yv949o6XwIqam

Malware Config

Extracted

Family

gafgyt

C2

239.255.255.250:1900

Targets

    • Target

      IObeENwjarm5

    • Size

      208KB

    • MD5

      02e8929813570f32ccd84df7363f99cb

    • SHA1

      a753fcf0ff1cdefde8a2dbe6654f94416f30240a

    • SHA256

      180989d6d886af835ae4584b6047fe4887dedb4a875438d0d124f72aaa29caef

    • SHA512

      532d177b9c04d0bd28f0ba14e09a7c97402c9231637e4ba17aae1a97bb32fee6a17f463cfef950d119b74ec94fa51e445dab96d4a6d435275bf566ba88bcbd8a

    • SSDEEP

      6144:kfteTTU4z8LGg+Wih0DuO+H8yv949o6XwIqcBm:KtyTXzyjkKa6yv949o6XwIqam

    Score
    6/10
    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

MITRE ATT&CK Enterprise v15

Tasks