Overview

overview

10

Static

static

10

135f766d84...efdf8b

ubuntu-18.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    135f766d84d2c5db45dbb56348b1f75797455f33e7243f9b79ea3fc6d7efdf8b
  • Size 81KB
  • Sample261104-ym55gsft7r
  • SHA256 135f766d84d2c5db45dbb56348b1f75797455f33e7243f9b79ea3fc6d7efdf8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
gafgytbotnetdiscoverylinux

Malware Config

Extracted

Family

  • gafgyt

C2

  • 194.15.36.193:666

Targets

    • Target
      135f766d84d2c5db45dbb56348b1f75797455f33e7243f9b79ea3fc6d7efdf8b
    • Size 81KB
    • SHA256 135f766d84d2c5db45dbb56348b1f75797455f33e7243f9b79ea3fc6d7efdf8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks