Overview

overview

10

Static

static

10

792bfe7aed...52.elf

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    792bfe7aedd030b23261c695a38c8e52.elf

  • Size

    148KB

  • Sample

    230403-pv9cfaeg32

  • MD5

    792bfe7aedd030b23261c695a38c8e52

  • SHA1

    66031543342b0b2cc54f59e7cd105311ec9d7d53

  • SHA256

    1e5018d80d427eb77b0575d82d9a5e634b92be98853e49abb9e9f1627d6d5d90

  • SHA512

    f82d131729ec0a53429170f906d6c69a05f78c40e5815cfb2f1988e3a994c74837053f63bd53b150aaf6094224870f10e356bf65dbf61f858df95dfe0ed8ff23

  • SSDEEP

    1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hB:vY01ZkXAQT4Nw9//ImlWs4zWfOodW

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

88.208.199.38:23

Targets

    • Target

      792bfe7aedd030b23261c695a38c8e52.elf

    • Size

      148KB

    • MD5

      792bfe7aedd030b23261c695a38c8e52

    • SHA1

      66031543342b0b2cc54f59e7cd105311ec9d7d53

    • SHA256

      1e5018d80d427eb77b0575d82d9a5e634b92be98853e49abb9e9f1627d6d5d90

    • SHA512

      f82d131729ec0a53429170f906d6c69a05f78c40e5815cfb2f1988e3a994c74837053f63bd53b150aaf6094224870f10e356bf65dbf61f858df95dfe0ed8ff23

    • SSDEEP

      1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hB:vY01ZkXAQT4Nw9//ImlWs4zWfOodW

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks