Overview

overview

10

Static

static

10

dbed2a985f...8a.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbed2a985fb620021ab88c326bdc098a.elf

  • Size

    146KB

  • Sample

    230318-wvwvnsfd2x

  • MD5

    dbed2a985fb620021ab88c326bdc098a

  • SHA1

    05ae574c1da7bf41abcd18cd1846178488d2532e

  • SHA256

    fee8ee25f2b29e61c565db5a9d5f75a668b87793e276cb1622f59f840ee1872a

  • SHA512

    7b7af4d59f6c29c03e7686f14a6ddc4eecc8cb9da07c108983c8223ff41ac52529ce0637aea954e3a9a001df3b92bfb84b03cd95463aa9df55eb63bad81c5e9b

  • SSDEEP

    3072:fuNaNpF4uVN++dkhnxuQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnkQennCM/9ekmpwfvafZn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      dbed2a985fb620021ab88c326bdc098a.elf

    • Size

      146KB

    • MD5

      dbed2a985fb620021ab88c326bdc098a

    • SHA1

      05ae574c1da7bf41abcd18cd1846178488d2532e

    • SHA256

      fee8ee25f2b29e61c565db5a9d5f75a668b87793e276cb1622f59f840ee1872a

    • SHA512

      7b7af4d59f6c29c03e7686f14a6ddc4eecc8cb9da07c108983c8223ff41ac52529ce0637aea954e3a9a001df3b92bfb84b03cd95463aa9df55eb63bad81c5e9b

    • SSDEEP

      3072:fuNaNpF4uVN++dkhnxuQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnkQennCM/9ekmpwfvafZn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks