Overview

overview

10

Static

static

10

cf42dff402...9d.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf42dff402928f5e331496099bc14f9d.elf

  • Size

    108KB

  • Sample

    230320-k17ctaeg3z

  • MD5

    cf42dff402928f5e331496099bc14f9d

  • SHA1

    cd355a387c855e5cbccc31668b9b6d8d6baee2d5

  • SHA256

    897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab

  • SHA512

    441926cbfaab66f8a964e7a42a95aaabc83d10dbb91e432fa7400e081d58f931f79c954d79e99801dc326033530ff58d109c8a59282546d42a05e1080a8ede91

  • SSDEEP

    3072:b6an17WtsWhdgYJH0D6mbPbmTQOWsXAOn:Wan17WPJH0D6ibmTQOWCAOn

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      cf42dff402928f5e331496099bc14f9d.elf

    • Size

      108KB

    • MD5

      cf42dff402928f5e331496099bc14f9d

    • SHA1

      cd355a387c855e5cbccc31668b9b6d8d6baee2d5

    • SHA256

      897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab

    • SHA512

      441926cbfaab66f8a964e7a42a95aaabc83d10dbb91e432fa7400e081d58f931f79c954d79e99801dc326033530ff58d109c8a59282546d42a05e1080a8ede91

    • SSDEEP

      3072:b6an17WtsWhdgYJH0D6mbPbmTQOWsXAOn:Wan17WPJH0D6ibmTQOWCAOn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks