General

  • Target

    felkawtf.x86

  • Size

    92KB

  • Sample

    250220-ymhn7avqz2

  • MD5

    ebedd50b5485e2268be4d7e32212dc38

  • SHA1

    ad322cf2a5871515f8fb36fa9107a37c064dd00d

  • SHA256

    3e6dc4d018753cfb186dc7ad81d24f1648a66371aa6513c6a6aa3403aa366e7d

  • SHA512

    062940a28e592d79b4d151fa07a0373b5434fc09562dc57273e3b6263d371540a0b8073c0de246a563bc0029619c83ab3c8e25428f419290bce8ebd4edf499eb

  • SSDEEP

    1536:np7TUZIPp4sPX94v4t5P6vOC3rVUR/H3Y/4moIVuOVjeDlOXQ:ptPp4eNXt5Po5raR/XYgmrVuOVyDlOXQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

15.204.128.30:6140

Targets

    • Target

      felkawtf.x86

    • Size

      92KB

    • MD5

      ebedd50b5485e2268be4d7e32212dc38

    • SHA1

      ad322cf2a5871515f8fb36fa9107a37c064dd00d

    • SHA256

      3e6dc4d018753cfb186dc7ad81d24f1648a66371aa6513c6a6aa3403aa366e7d

    • SHA512

      062940a28e592d79b4d151fa07a0373b5434fc09562dc57273e3b6263d371540a0b8073c0de246a563bc0029619c83ab3c8e25428f419290bce8ebd4edf499eb

    • SSDEEP

      1536:np7TUZIPp4sPX94v4t5P6vOC3rVUR/H3Y/4moIVuOVjeDlOXQ:ptPp4eNXt5Po5raR/XYgmrVuOVyDlOXQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks