Overview

overview

10

Static

static

10

fuckjewish...86.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fuckjewishpeople.x86.elf

  • Size

    91KB

  • Sample

    230331-wlawvacc45

  • MD5

    4544b40ca36171545258a459a4f7998b

  • SHA1

    d069d8e49e403d7b4bb825f761bc71bd8403ca2f

  • SHA256

    3441b0320fe7ff51f243a71250ec19502a2a2cc7d4ca41247483c791be61d1f1

  • SHA512

    7bf4ae37e2119c8f9e45134ae465a87d33840f94c863928da4bb9899c596d66ea78225127f0bcd16aaa806eba8aaac2b4a6d8ddf4232357c269f358d826ec81b

  • SSDEEP

    1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3QphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdQphaE/XVog99um2XFY

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

5.249.162.136:4258

Targets

    • Target

      fuckjewishpeople.x86.elf

    • Size

      91KB

    • MD5

      4544b40ca36171545258a459a4f7998b

    • SHA1

      d069d8e49e403d7b4bb825f761bc71bd8403ca2f

    • SHA256

      3441b0320fe7ff51f243a71250ec19502a2a2cc7d4ca41247483c791be61d1f1

    • SHA512

      7bf4ae37e2119c8f9e45134ae465a87d33840f94c863928da4bb9899c596d66ea78225127f0bcd16aaa806eba8aaac2b4a6d8ddf4232357c269f358d826ec81b

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3QphauH/VPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdQphaE/XVog99um2XFY

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks