Overview

overview

10

Static

static

10

897be69cd1...ab.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.zip

  • Size

    48KB

  • Sample

    230321-rykjlabb66

  • MD5

    5a13280407ba70a9244cbcc7d1de29af

  • SHA1

    18bc2edc9af562f80e933b16ee8b28353283fe12

  • SHA256

    299e7acc1cad7d71657b85224898ace9a5410e97feca816822a8b01cc8210183

  • SHA512

    ea18e335a8a8412bee081e0ad45545fe614be09d41fbeb2eee88dd0e50481b8e3012a7eb03470ddf9955877ec2392bc3dc9ac7facea5ac7ddf1dee6fe5371910

  • SSDEEP

    1536:knzUP3oFfG47j7IO1iKvs4YhfL1q5o2rAJmC1w:ks3ae47HIgLvGL1q5o2re51w

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.elf

    • Size

      108KB

    • MD5

      cf42dff402928f5e331496099bc14f9d

    • SHA1

      cd355a387c855e5cbccc31668b9b6d8d6baee2d5

    • SHA256

      897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab

    • SHA512

      441926cbfaab66f8a964e7a42a95aaabc83d10dbb91e432fa7400e081d58f931f79c954d79e99801dc326033530ff58d109c8a59282546d42a05e1080a8ede91

    • SSDEEP

      3072:b6an17WtsWhdgYJH0D6mbPbmTQOWsXAOn:Wan17WPJH0D6ibmTQOWCAOn

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks