Overview

overview

10

Static

static

10

1da5373a9a...49.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce98a710b21354c5402e0fbd208fc58e.bin

  • Size

    38KB

  • Sample

    230325-cek9fsae83

  • MD5

    6713784e7d1f5976159819f15152dad6

  • SHA1

    37e8e86c922cef731e720244159ced09a8100a52

  • SHA256

    4bb46eec1d88be71a58cec1a099f3298b287b97d91ed2a8e349ecb0aedcdd8ac

  • SHA512

    679fcea992383b7ea1354249e8e52b4a851959a7f3c69d0d9f016e6c178e80772c1b11acad6ec952afde248fa364b4cc9f5b781de2a49c54b37e73b73271efd9

  • SSDEEP

    768:mbTmj5VLlXGDWDie/dlcrVCEDrjAwtgxjaIjJIZk8Z8HmrRJXKvd8c1:S6jLNGyWkWVCwXADxjaIIlZuOD+yc1

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      1da5373a9a1badc39acd477607f58f7046430e7cc9894b16a219126b9c4c1c49.elf

    • Size

      83KB

    • MD5

      ce98a710b21354c5402e0fbd208fc58e

    • SHA1

      0100ec11195062f992d497fa212254aa811095b8

    • SHA256

      1da5373a9a1badc39acd477607f58f7046430e7cc9894b16a219126b9c4c1c49

    • SHA512

      361465dce8d0160d005302f0cc804bb44555efae1fceaf6cb7deee8252f0335d2ec5cb9b1774250f899a42ca97afd16b9bd00bb6607472967f88f7e744864ede

    • SSDEEP

      1536:UB7crF7FePF5tZuEqdPUq0aJb9sqx3CjrM3XYuWIr8UmoIYuOVje+ZNne:URQFet5O7dPr0oSwyjr4XYuDnmrYuOVA

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks