Overview

overview

10

Static

static

10

x86.elf

ubuntu-18.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x86.elf

  • Size

    112KB

  • Sample

    230403-n6bpwaga51

  • MD5

    5a639c8a52ad6d3ae7bdc8e92a684182

  • SHA1

    1f5c1a13387008efe475ce0aa6d47c82f1d32170

  • SHA256

    0e7898a312d030b0aa8dcd8076affad0ef5a1dccdc77c5e153788eaebc84a720

  • SHA512

    6f86980c237f6d4b2a45413ba2262b5af7f1447ba9e95430c8b62cf2c1b0b2943d8aeb6876d63d341d5d23fd84baedf20549193c751eed982117e999a6f63d94

  • SSDEEP

    3072:Ld0wlSAewzi+Xn+8Uhw6W+aPLJmDk1c8xF6KjW:jfO8IBaJmDk1c8xF6KjW

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

45.134.11.110:23

Targets

    • Target

      x86.elf

    • Size

      112KB

    • MD5

      5a639c8a52ad6d3ae7bdc8e92a684182

    • SHA1

      1f5c1a13387008efe475ce0aa6d47c82f1d32170

    • SHA256

      0e7898a312d030b0aa8dcd8076affad0ef5a1dccdc77c5e153788eaebc84a720

    • SHA512

      6f86980c237f6d4b2a45413ba2262b5af7f1447ba9e95430c8b62cf2c1b0b2943d8aeb6876d63d341d5d23fd84baedf20549193c751eed982117e999a6f63d94

    • SSDEEP

      3072:Ld0wlSAewzi+Xn+8Uhw6W+aPLJmDk1c8xF6KjW:jfO8IBaJmDk1c8xF6KjW

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks