Overview

overview

10

Static

static

10

1644cb4cd1...9e.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1644cb4cd17f741805607d0bad38e89e.elf

  • Size

    116KB

  • Sample

    230316-1tb64afb8z

  • MD5

    1644cb4cd17f741805607d0bad38e89e

  • SHA1

    182a92aae4684ec774ea10e8d464851f36ffefd1

  • SHA256

    b4ca701c5b421f5dc01156234fc0bd96f859394fa6f1cdfd5c71e990f3d906e8

  • SHA512

    de9365a6f06dcb50777edb4d0349a9a6a6d3c79b6ce76d33be77b0fe0afd0aa4f298240fa516a6caa774a5cf54c239b91d1694692fc416a4bb136a2edb60283a

  • SSDEEP

    3072:idwracAAviNmLpMQ1xM5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxM5hKHKnlAdmyDQUJ1a4Tn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      1644cb4cd17f741805607d0bad38e89e.elf

    • Size

      116KB

    • MD5

      1644cb4cd17f741805607d0bad38e89e

    • SHA1

      182a92aae4684ec774ea10e8d464851f36ffefd1

    • SHA256

      b4ca701c5b421f5dc01156234fc0bd96f859394fa6f1cdfd5c71e990f3d906e8

    • SHA512

      de9365a6f06dcb50777edb4d0349a9a6a6d3c79b6ce76d33be77b0fe0afd0aa4f298240fa516a6caa774a5cf54c239b91d1694692fc416a4bb136a2edb60283a

    • SSDEEP

      3072:idwracAAviNmLpMQ1xM5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxM5hKHKnlAdmyDQUJ1a4Tn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks