General

  • Target

    c3425a2839883dbec80af2c4dde02e98.bin

  • Size

    40KB

  • Sample

    230724-c6xrkaab6t

  • MD5

    2051e26ad3758b413217ac3b72df0889

  • SHA1

    0479081b35d53564785a9fb5ea0455a8ca064733

  • SHA256

    2fc30cff81a02e10fffd4ef4ed1758075c30274d77e23d36e64459b0967afc4e

  • SHA512

    a7e8d204f83b01960eb80b2c670dd86f2200bbe752005c57a3feb7198e27108b01b7fc9b0e61bd27812c30c8e7f641aa8c43c88b19c58ae1a3d9ef3c8f6fdc73

  • SSDEEP

    768:Cfi7fM+8XbPsNnsFhGGM+GW/75idoARfUL2LzgEb5t:CfuQLkNsF8Gd5N6L3Vt

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.181.80.134:888

Targets

    • Target

      40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16.elf

    • Size

      91KB

    • MD5

      c3425a2839883dbec80af2c4dde02e98

    • SHA1

      f8300adce76adcd7c011c9ac7f191538cc0a64b4

    • SHA256

      40cea0fd6a719373eeeaecb444ff7b7c93f096d868e22d867a34e4824e9dcb16

    • SHA512

      07bc18240c7c394dcba1bc71b581632431953ae59e6ee2c69b98ca2105fa1a14bd4e1d3ed15112219d72972df9a8c02c04c03ecd5074ad615a13b88b93df1a51

    • SSDEEP

      1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3tphauH/njvyig6I9um2Xj5YZb0e:pcCPOkfQfNipGdtphaE/njvLg99um2Xe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks