Overview

overview

10

Static

static

10

x86.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x86.elf

  • Size

    112KB

  • Sample

    230403-n4kvrsga4y

  • MD5

    1bebeae48e862ca9d961d49c4d3bfc76

  • SHA1

    be4356b2887572d3dd2ed4c946ce41b8611911fa

  • SHA256

    b8f37111f7a08f73bfdb407741548b67547d136f5773a94ced656b0b3ba884d6

  • SHA512

    a0790f4251314ce471f715c55e693969feb9be5c95120e367b8535b490e471af0caddb2edae513e3a6a2d22d866db04b8e48a9bfdf4daf42b67e9bbeac1850fa

  • SSDEEP

    3072:Ld0wlSAewzi+Xn+8Uhw6W+aP+JmDk1c8xF6KjW:jfO8IBfJmDk1c8xF6KjW

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

88.208.199.38:23

Targets

    • Target

      x86.elf

    • Size

      112KB

    • MD5

      1bebeae48e862ca9d961d49c4d3bfc76

    • SHA1

      be4356b2887572d3dd2ed4c946ce41b8611911fa

    • SHA256

      b8f37111f7a08f73bfdb407741548b67547d136f5773a94ced656b0b3ba884d6

    • SHA512

      a0790f4251314ce471f715c55e693969feb9be5c95120e367b8535b490e471af0caddb2edae513e3a6a2d22d866db04b8e48a9bfdf4daf42b67e9bbeac1850fa

    • SSDEEP

      3072:Ld0wlSAewzi+Xn+8Uhw6W+aP+JmDk1c8xF6KjW:jfO8IBfJmDk1c8xF6KjW

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks