Overview

overview

10

Static

static

10

14ee5ff8f0...5f.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14ee5ff8f0fcd533a27396a917f49a5f.elf

  • Size

    148KB

  • Sample

    230324-twypjshf6w

  • MD5

    14ee5ff8f0fcd533a27396a917f49a5f

  • SHA1

    a596a90ea8cc68771340d2518c2f8101f5e9c0e0

  • SHA256

    d6d58fe964e2f2c6413ca6884ee4efc740059cc656dbdba01313b4919810df37

  • SHA512

    c8dfa4979afa75b49ae814e0f45e92859afd1d3570acff14d541d7c708b717b3f7f455fb142e4ae847f9291c95851c3d197393aac543e5fe24741b5e2a16b592

  • SSDEEP

    3072:kd2za4YR7r2yOQIg0U5h8MDygyqmyGQUYT7XS/n:Y2a4YR7Z0U5h8MD3myGQUYTLS/n

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      14ee5ff8f0fcd533a27396a917f49a5f.elf

    • Size

      148KB

    • MD5

      14ee5ff8f0fcd533a27396a917f49a5f

    • SHA1

      a596a90ea8cc68771340d2518c2f8101f5e9c0e0

    • SHA256

      d6d58fe964e2f2c6413ca6884ee4efc740059cc656dbdba01313b4919810df37

    • SHA512

      c8dfa4979afa75b49ae814e0f45e92859afd1d3570acff14d541d7c708b717b3f7f455fb142e4ae847f9291c95851c3d197393aac543e5fe24741b5e2a16b592

    • SSDEEP

      3072:kd2za4YR7r2yOQIg0U5h8MDygyqmyGQUYT7XS/n:Y2a4YR7Z0U5h8MD3myGQUYTLS/n

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks