General

  • Target

    11e0ef04e404a1ed9fb4b30f199b6246.elf

  • Size

    110KB

  • Sample

    230408-3dphlafg72

  • MD5

    11e0ef04e404a1ed9fb4b30f199b6246

  • SHA1

    333cb51dc0c150e33d030056861c3945d0f1bee5

  • SHA256

    94d5d057577f36631295c46fcad47598e682e35d26fe8d7de1542911fa307190

  • SHA512

    d9b807635ad317312e828e69e6425a3208bf7dd651a7369ea9f6b5ad585882d06716fcc403defb30898460696da8faddaf904ffb7de46e51c5076c6c7a8b3d8b

  • SSDEEP

    1536:XWeTPtQhxLw9BFY6zZLExRtdKzY8nqqswptjMi8tbOimWt0zFufCy/02vI:XrtQGFnGKzYQswvf8taimWOzFufJ02vI

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

104.193.255.117:1234

Targets

    • Target

      11e0ef04e404a1ed9fb4b30f199b6246.elf

    • Size

      110KB

    • MD5

      11e0ef04e404a1ed9fb4b30f199b6246

    • SHA1

      333cb51dc0c150e33d030056861c3945d0f1bee5

    • SHA256

      94d5d057577f36631295c46fcad47598e682e35d26fe8d7de1542911fa307190

    • SHA512

      d9b807635ad317312e828e69e6425a3208bf7dd651a7369ea9f6b5ad585882d06716fcc403defb30898460696da8faddaf904ffb7de46e51c5076c6c7a8b3d8b

    • SSDEEP

      1536:XWeTPtQhxLw9BFY6zZLExRtdKzY8nqqswptjMi8tbOimWt0zFufCy/02vI:XrtQGFnGKzYQswvf8taimWOzFufJ02vI

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks