General

  • Target

    a-r.m-6.SNOOPY

  • Size

    108KB

  • Sample

    241202-zs72pssmgw

  • MD5

    d99e614a76b1b6b63030556a22cf2881

  • SHA1

    1cc0cc981f07d648722bc0b112da2d697858558f

  • SHA256

    6bcf634cf08615de9c4f5759bcc2523b114db64a67ed3c119c7aa4230be0b0b5

  • SHA512

    19585dae9db8f913f809da6644127b064b03ec2156fe482b87feb803c8facb291da0b951336c7bc13cef6af1a032229f8f18511b09531a2ad3dce4f53bb8051f

  • SSDEEP

    3072:2anV3ut0WhwgEx+WDk5OLzbmTQOWsXAOn:2anV3uox+WDWmbmTQOWCAOn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

192.3.179.33:23

Targets

    • Target

      a-r.m-6.SNOOPY

    • Size

      108KB

    • MD5

      d99e614a76b1b6b63030556a22cf2881

    • SHA1

      1cc0cc981f07d648722bc0b112da2d697858558f

    • SHA256

      6bcf634cf08615de9c4f5759bcc2523b114db64a67ed3c119c7aa4230be0b0b5

    • SHA512

      19585dae9db8f913f809da6644127b064b03ec2156fe482b87feb803c8facb291da0b951336c7bc13cef6af1a032229f8f18511b09531a2ad3dce4f53bb8051f

    • SSDEEP

      3072:2anV3ut0WhwgEx+WDk5OLzbmTQOWsXAOn:2anV3uox+WDWmbmTQOWCAOn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks