Overview

overview

10

Static

static

10

skid.x86.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skid.x86.elf

  • Size

    90KB

  • Sample

    230407-wvax7sab22

  • MD5

    3500258693165311b6889ab65352c793

  • SHA1

    7c23fc6593989bf5c7d3fce38e6ab63f20ab2eb2

  • SHA256

    6a042cc68c2047edbd43fd020352b898fd431eba4ec6cab03f9e5029827638b1

  • SHA512

    a18a3de275d1db1ace39cbe6acb86f32775b077db8fde2122b2d973f56f38d9b51e790d6e88652773aaffedd5fe9a63e2e1d6caca22b768cd352179bbd327b78

  • SSDEEP

    1536:W7WREyqkQc923v2uNi7pNF+BoD30phanvn00GFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo70phanvn000mr5um2Xx

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

157.230.247.140:168

Targets

    • Target

      skid.x86.elf

    • Size

      90KB

    • MD5

      3500258693165311b6889ab65352c793

    • SHA1

      7c23fc6593989bf5c7d3fce38e6ab63f20ab2eb2

    • SHA256

      6a042cc68c2047edbd43fd020352b898fd431eba4ec6cab03f9e5029827638b1

    • SHA512

      a18a3de275d1db1ace39cbe6acb86f32775b077db8fde2122b2d973f56f38d9b51e790d6e88652773aaffedd5fe9a63e2e1d6caca22b768cd352179bbd327b78

    • SSDEEP

      1536:W7WREyqkQc923v2uNi7pNF+BoD30phanvn00GFmoI5um2Xj5YZA0e:4RkQT3v9EbYBo70phanvn000mr5um2Xx

    Score
    7/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks