Overview

overview

10

Static

static

10

b3d6593c52...0d.elf

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3d6593c527977e92fc57935bb964f0d.elf

  • Size

    106KB

  • Sample

    230319-zyay6acb8v

  • MD5

    b3d6593c527977e92fc57935bb964f0d

  • SHA1

    1043579a9bf3cc737031b2c0dfeaa8402ea5c390

  • SHA256

    cdb6371ffc409aa05e57992e5c541aa75b7b3ea1c9c8581571714feecae87576

  • SHA512

    f205f5d3a881494843925131d60d47a9c778847591c6c29c8007c1746eb6c5fe510eb41c81c9613b4e44b66e595bed72624515b0cd6e2d52530d9a2e3be08e2e

  • SSDEEP

    1536:UeeTu2u8IM46rrMNf4ZcrjYYkUNTEM4+rnBlLNzgLUmkiIF8iCKrmne:UEgrGf4d0EMvPZgUmkiIF8iPrmne

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      b3d6593c527977e92fc57935bb964f0d.elf

    • Size

      106KB

    • MD5

      b3d6593c527977e92fc57935bb964f0d

    • SHA1

      1043579a9bf3cc737031b2c0dfeaa8402ea5c390

    • SHA256

      cdb6371ffc409aa05e57992e5c541aa75b7b3ea1c9c8581571714feecae87576

    • SHA512

      f205f5d3a881494843925131d60d47a9c778847591c6c29c8007c1746eb6c5fe510eb41c81c9613b4e44b66e595bed72624515b0cd6e2d52530d9a2e3be08e2e

    • SSDEEP

      1536:UeeTu2u8IM46rrMNf4ZcrjYYkUNTEM4+rnBlLNzgLUmkiIF8iCKrmne:UEgrGf4d0EMvPZgUmkiIF8iPrmne

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks