Overview

overview

10

Static

static

10

0b862a3b57...36.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b862a3b57ce17fe2780541d0bde2b77965eba3065bd40fb9fb7df884e525336.zip

  • Size

    39KB

  • Sample

    230321-ryj8tsbb59

  • MD5

    99281598605dd0ff3daeb96ce83d43c5

  • SHA1

    faf485669f3727128e3532dc02b2019dd00f15b8

  • SHA256

    37395cb81ede8b21b907ed8fac109e9c21d5a60ca2333e53b2c57ae81c23fd90

  • SHA512

    b9cb149e45aec4bb264e8d2dcfb1aa4c967f8c6a1eca50f6ee664269cd1de4da88a37693ce360d3ed987655768778134fcd8b6e7c272aa95ee8ba81abc03dc03

  • SSDEEP

    768:08nXdtf17qUI0u8mZKP5UtGEMCgMxKcCFzVWz8jpXz65vfe9AAk3AUtYpIjY+pyE:08Xdtd+XRZ+5O+CjkXHl6OOAMjC0

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      0b862a3b57ce17fe2780541d0bde2b77965eba3065bd40fb9fb7df884e525336.elf

    • Size

      110KB

    • MD5

      e9be7ee316f1e48e32c424b15c7f669f

    • SHA1

      c824af7a0fcaced52006c1449356a1520c66431a

    • SHA256

      0b862a3b57ce17fe2780541d0bde2b77965eba3065bd40fb9fb7df884e525336

    • SHA512

      a079ec3ca17ba22357b07553edcfe73f12eb9cfdcaa25e3c5d55f0302e86149553bea55a7b9e26f062165452da39f881dd28c267be139abfb6a70a0b8da1434a

    • SSDEEP

      3072:R/4tNF9U4vvZKw6J73x8UmkiSFxfKxbXe:BUNFK+Z8T8UmkiSFxfKxbXe

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks