General

  • Target

    e1762eb8cb535400397dd876bdd7d02a.elf

  • Size

    110KB

  • Sample

    230408-3nvscshg3s

  • MD5

    e1762eb8cb535400397dd876bdd7d02a

  • SHA1

    184bcce7b93289cc2ada0cbef296ea15d974fffe

  • SHA256

    795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f

  • SHA512

    29ee341a34ecb7a57ca4e81e3333e4d5844cd7076680037afbf651d0ba03abaf2f1c3e413081739d64428eb183c60fc1cbb94ef718470cd31fab7a562a22b4f9

  • SSDEEP

    1536:V7j+1TuBq+bkYQg2rKlJWl/SgEThaAClfGemoJnimWt0zFufCy/02vI:okrwSgE0tlfUoVimWOzFufJ02vI

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

104.193.255.117:1234

Targets

    • Target

      e1762eb8cb535400397dd876bdd7d02a.elf

    • Size

      110KB

    • MD5

      e1762eb8cb535400397dd876bdd7d02a

    • SHA1

      184bcce7b93289cc2ada0cbef296ea15d974fffe

    • SHA256

      795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f

    • SHA512

      29ee341a34ecb7a57ca4e81e3333e4d5844cd7076680037afbf651d0ba03abaf2f1c3e413081739d64428eb183c60fc1cbb94ef718470cd31fab7a562a22b4f9

    • SSDEEP

      1536:V7j+1TuBq+bkYQg2rKlJWl/SgEThaAClfGemoJnimWt0zFufCy/02vI:okrwSgE0tlfUoVimWOzFufJ02vI

    Score
    7/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks