Overview

overview

10

Static

static

10

cdb6371ffc...76.elf

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3d6593c527977e92fc57935bb964f0d.bin

  • Size

    39KB

  • Sample

    230321-b5nxlagc75

  • MD5

    b3045d58376965c5164909671ac1379c

  • SHA1

    0c97cb0cb85e586f6f7212ce24e7a31e1bf257b2

  • SHA256

    c63a62fa2146e5efd7c47efff5b23a07a3cbcb88e834f46e31b3219e927a75d6

  • SHA512

    2bc69fc584bfeb073bfafb3c7dc09bc0d81119449c09060d8616478ac14a9fb80089e8fb139c059d6a78ab728a501531a648dc63981ef900de9c1949628bc127

  • SSDEEP

    768:dmeJyzfUi1s6rK7grwfqTgvwq4ov4Clafz8+Re24OeH1N+0+2m:LJIf/e6ut2awq4ovziz8+Ka0+r

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      cdb6371ffc409aa05e57992e5c541aa75b7b3ea1c9c8581571714feecae87576.elf

    • Size

      106KB

    • MD5

      b3d6593c527977e92fc57935bb964f0d

    • SHA1

      1043579a9bf3cc737031b2c0dfeaa8402ea5c390

    • SHA256

      cdb6371ffc409aa05e57992e5c541aa75b7b3ea1c9c8581571714feecae87576

    • SHA512

      f205f5d3a881494843925131d60d47a9c778847591c6c29c8007c1746eb6c5fe510eb41c81c9613b4e44b66e595bed72624515b0cd6e2d52530d9a2e3be08e2e

    • SSDEEP

      1536:UeeTu2u8IM46rrMNf4ZcrjYYkUNTEM4+rnBlLNzgLUmkiIF8iCKrmne:UEgrGf4d0EMvPZgUmkiIF8iPrmne

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks