General

  • Target

    jasht.arm5

  • Size

    150KB

  • Sample

    240901-n38kfazdnm

  • MD5

    36fe40767bd1aaedb514a496aa668255

  • SHA1

    ffac1369fe5113390024f90335d54e83dc380072

  • SHA256

    15b6d12a1da5a977416bb89aea1ca4b683366a5be988db8751cf1ace30a24416

  • SHA512

    04e8923676422f8b522d26514be8c8ebcb539f40129fe1fd416ca38894a70fea959f7210c408195bf333fc9990e0fecafc09ef5425bb96ea9c7b5c73a0af4b84

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAe5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTf5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.216.18.202:4258

Targets

    • Target

      jasht.arm5

    • Size

      150KB

    • MD5

      36fe40767bd1aaedb514a496aa668255

    • SHA1

      ffac1369fe5113390024f90335d54e83dc380072

    • SHA256

      15b6d12a1da5a977416bb89aea1ca4b683366a5be988db8751cf1ace30a24416

    • SHA512

      04e8923676422f8b522d26514be8c8ebcb539f40129fe1fd416ca38894a70fea959f7210c408195bf333fc9990e0fecafc09ef5425bb96ea9c7b5c73a0af4b84

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAe5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTf5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks