Overview

overview

10

Static

static

10

55f671afa7...5f.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55f671afa7905d1d5e4697cf33dbc55f.elf

  • Size

    109KB

  • Sample

    230328-v3pwnacc35

  • MD5

    55f671afa7905d1d5e4697cf33dbc55f

  • SHA1

    01440e1d7b8775c31c7b3acb0b09d2e82da677b8

  • SHA256

    faae7aa3a02609bf4971bae9371ff1cfd5b664b7b20144279c7669759a75f3a7

  • SHA512

    1e7bb4ac10912eaaffb10b792f01c4e0907b3831393175f666038e96c181b1b769924e6434598aed2f31f478a9da4c1325d64c4dffb35da2b8f54852283305af

  • SSDEEP

    3072:EbIl2rZjfa15tdl/ndlV36GuNmPpumAQOqzXczN:EbIatfaTl/ngwumAQOqzczN

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      55f671afa7905d1d5e4697cf33dbc55f.elf

    • Size

      109KB

    • MD5

      55f671afa7905d1d5e4697cf33dbc55f

    • SHA1

      01440e1d7b8775c31c7b3acb0b09d2e82da677b8

    • SHA256

      faae7aa3a02609bf4971bae9371ff1cfd5b664b7b20144279c7669759a75f3a7

    • SHA512

      1e7bb4ac10912eaaffb10b792f01c4e0907b3831393175f666038e96c181b1b769924e6434598aed2f31f478a9da4c1325d64c4dffb35da2b8f54852283305af

    • SSDEEP

      3072:EbIl2rZjfa15tdl/ndlV36GuNmPpumAQOqzXczN:EbIatfaTl/ngwumAQOqzczN

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks