Overview

overview

10

Static

static

10

b3fefe0638...c6.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3fefe0638fe6ec9379250b7828c13c6.elf

  • Size

    111KB

  • Sample

    230402-rjzpzaaa7s

  • MD5

    b3fefe0638fe6ec9379250b7828c13c6

  • SHA1

    8acdd6917b5f3d742de9e30f083a585bfcb92450

  • SHA256

    8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc

  • SHA512

    c9af95d68bb33909424c7ca8d2b0fd0d5c5dc1fa36cbc794bd27a913855fb22195ec0c5a3889d2dd56c6a1ed16ce0f33cb7320fdc564fc104a226dcba5e818ad

  • SSDEEP

    3072:7ExVvKY9cxN5hZXynGuExmkizF9GhsRiAe:o7SRN5hZXySxmkizF9GhsRiAe

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

43.153.37.45:707

Targets

    • Target

      b3fefe0638fe6ec9379250b7828c13c6.elf

    • Size

      111KB

    • MD5

      b3fefe0638fe6ec9379250b7828c13c6

    • SHA1

      8acdd6917b5f3d742de9e30f083a585bfcb92450

    • SHA256

      8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc

    • SHA512

      c9af95d68bb33909424c7ca8d2b0fd0d5c5dc1fa36cbc794bd27a913855fb22195ec0c5a3889d2dd56c6a1ed16ce0f33cb7320fdc564fc104a226dcba5e818ad

    • SSDEEP

      3072:7ExVvKY9cxN5hZXynGuExmkizF9GhsRiAe:o7SRN5hZXySxmkizF9GhsRiAe

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks