Overview

overview

10

Static

static

10

5742531748...10.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57425317483f680d06eeeaee0fb63410.elf

  • Size

    116KB

  • Sample

    230319-m19jaaab2x

  • MD5

    57425317483f680d06eeeaee0fb63410

  • SHA1

    17014c3f79a2906efd3ebc99e0a6ea8492d95724

  • SHA256

    d10e417a5e8c61a4a9c3e72b1779a88e2e08de78b0b0bccad2e0c77b030a5277

  • SHA512

    c63465719bc6dbf32cc87158177e4da30bc13925cf1a62e826f3d96e13811421c9b0b8ff8e9a4305b171b9430e27eedd280add58f173cd35d0ff0228307324ec

  • SSDEEP

    3072:ed3Da04A7iNmLJMQJBO5hd5Kynz2FAdmyDQUJ1UX4Tn:G3Da1ciABO5hd5K3FAdmyDQUJ1a4Tn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      57425317483f680d06eeeaee0fb63410.elf

    • Size

      116KB

    • MD5

      57425317483f680d06eeeaee0fb63410

    • SHA1

      17014c3f79a2906efd3ebc99e0a6ea8492d95724

    • SHA256

      d10e417a5e8c61a4a9c3e72b1779a88e2e08de78b0b0bccad2e0c77b030a5277

    • SHA512

      c63465719bc6dbf32cc87158177e4da30bc13925cf1a62e826f3d96e13811421c9b0b8ff8e9a4305b171b9430e27eedd280add58f173cd35d0ff0228307324ec

    • SSDEEP

      3072:ed3Da04A7iNmLJMQJBO5hd5Kynz2FAdmyDQUJ1UX4Tn:G3Da1ciABO5hd5K3FAdmyDQUJ1a4Tn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks