Overview

overview

10

Static

static

10

14b11e9f69...1b.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd607fec0168b0a67b0357e8c69701e2.bin

  • Size

    67KB

  • Sample

    230217-b8zs9scg5s

  • MD5

    a1ccf72a7df86cb4895e57309a282385

  • SHA1

    0304894de4f7c235c7ee738015fd389c81581cc5

  • SHA256

    baac75bfbd40dd2b8d9ebb34ec20cc2f2aebaea4cf804218622bbab9bd59a8e4

  • SHA512

    62adcb3979ef559de48d39f94836cd45f1e064b45d573f03c9509fc648c623089fda070712dfe29ad03135de34d0a2646573cd38d2087d1250b0ca8f99715cfc

  • SSDEEP

    1536:7HISPloJwmI+GjcmYwp6cYZHwyTtvSzppNbk4S1:7HI6lJxNYwp6cWvcTdkH

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      14b11e9f691756da99ad710ebdb2ee015fa01e23980559d50748140742854d1b.elf

    • Size

      152KB

    • MD5

      fd607fec0168b0a67b0357e8c69701e2

    • SHA1

      0acd1590858b829a276e635351fef48d591bf3c9

    • SHA256

      14b11e9f691756da99ad710ebdb2ee015fa01e23980559d50748140742854d1b

    • SHA512

      33b8f227227facff814a79d7c5ec52f13b056f20cf014ee4231a16f268abf408d5acaec40645f22afebda14a7a58185830977037c23d3999ec7c2adb87523f0f

    • SSDEEP

      3072:tdntU2haO5H1XacBoGmh9H5q5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9Hs5hDiGRcM/9l+7m5wS

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks