Overview

overview

10

Static

static

10

f01dd98cb5...9b.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f01dd98cb5003b692b097c3e9e2493ddd041511d4e1b2874d85fb6e1bbfd3a9b.zip

  • Size

    42KB

  • Sample

    230321-rykvcsbb68

  • MD5

    8b10af60038d86a6a994805c4ca13eee

  • SHA1

    e93e8b63e5ac709fd3133ab9f6047dcc449f93b1

  • SHA256

    9ee65cb279d521a7fab799b846ebf5e9c03d023a7610673bf8344bd780a719a6

  • SHA512

    fa6ed7084139c065564f9c03ad8e88fc6d6268d3b6da1ef80ceebb39ce5ca2354c09ceec4ac0f3cba32fef499ad361f2b1ef8aa54df8fab7683a74562941ac9e

  • SSDEEP

    768:mwOOhvlcsv8DX0Hl5/aoUNfn3s/RGwk0p4Idgk535mjKFqFz:mwVhvlKkF5SRfn3s5GmJj5mqIz

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      f01dd98cb5003b692b097c3e9e2493ddd041511d4e1b2874d85fb6e1bbfd3a9b.elf

    • Size

      113KB

    • MD5

      fb339cf69c95dc0cfc2e39212b653781

    • SHA1

      c3dfc45c904bf581cdc2cd4bb4ae3cd04ae5072c

    • SHA256

      f01dd98cb5003b692b097c3e9e2493ddd041511d4e1b2874d85fb6e1bbfd3a9b

    • SHA512

      2ee376b32955973fb2212c05cc6ae20b18a2a2ca1f3b3fd1f1956aa25ec9427c9e494a642b177b9bf9030466ae390a06e228b24921c7a848f212028ce451db55

    • SSDEEP

      3072:C/4g3Kd1rO5hZmxgA9OKdwwjF9GhsR1Ae:O9anO5hZLHKdwwjF9GhsR1Ae

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks