General

  • Target

    x-8.6-.Logicnet

  • Size

    92KB

  • Sample

    241203-zexzkssrdt

  • MD5

    754bf7dba3e5467a150b5bbe601f2f89

  • SHA1

    2a0047905765dc42d4d2b04ca155c3a9b004f45c

  • SHA256

    a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5

  • SHA512

    0f92f265b7ccba9eed163855e0ba3cca8734ffa929ec11eebae64a8df8f7a499819624d8f990867a9db43bbc34e2ba4643335e98c26685ab8bf097f74d7c7eca

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3OMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKeMvm/KWOXF7Y

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Targets

    • Target

      x-8.6-.Logicnet

    • Size

      92KB

    • MD5

      754bf7dba3e5467a150b5bbe601f2f89

    • SHA1

      2a0047905765dc42d4d2b04ca155c3a9b004f45c

    • SHA256

      a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5

    • SHA512

      0f92f265b7ccba9eed163855e0ba3cca8734ffa929ec11eebae64a8df8f7a499819624d8f990867a9db43bbc34e2ba4643335e98c26685ab8bf097f74d7c7eca

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3OMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKeMvm/KWOXF7Y

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks