Overview

overview

10

Static

static

10

bfbd01c4cf...f6.elf

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

  • Size

    133KB

  • Sample

    230403-yj9cqsaf2w

  • MD5

    bfbd01c4cf59a84d9ba40a02b9aa27f6

  • SHA1

    e26d234c4120a23e85f02a0bedf2297ce44bab76

  • SHA256

    0c6f5b1412fbb4c9143df6ab8f990aa284052d049b8dc2895b6db0dd923e8f33

  • SHA512

    b4dcdd8333d701b579e45690c5d06abed7f4b457b5b8433d1af3107355083a2947d1dd2620ba47189c34b879010b241589333d953ca2045bbd74637800f5417e

  • SSDEEP

    1536:Nc3eTkeVfACLsYXZF6beI/o8OVcjpRqdAXH4VDHcIrmW+IFB16f11hJ/:NcjIEZOVCqmXUDHcIrmW+IFB16t1hJ/

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

185.225.73.130:667

Targets

    • Target

      bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

    • Size

      133KB

    • MD5

      bfbd01c4cf59a84d9ba40a02b9aa27f6

    • SHA1

      e26d234c4120a23e85f02a0bedf2297ce44bab76

    • SHA256

      0c6f5b1412fbb4c9143df6ab8f990aa284052d049b8dc2895b6db0dd923e8f33

    • SHA512

      b4dcdd8333d701b579e45690c5d06abed7f4b457b5b8433d1af3107355083a2947d1dd2620ba47189c34b879010b241589333d953ca2045bbd74637800f5417e

    • SSDEEP

      1536:Nc3eTkeVfACLsYXZF6beI/o8OVcjpRqdAXH4VDHcIrmW+IFB16f11hJ/:NcjIEZOVCqmXUDHcIrmW+IFB16t1hJ/

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks