General

  • Target

    1130145b823d2a6f7c455426c70b3d982c16ca4870407d271ad5777862e14b68.elf

  • Size

    124KB

  • Sample

    240213-dasy6sdh37

  • MD5

    e442fd349afa7de7d192201dadcc031d

  • SHA1

    8e879059233ec1957e8986f0ad20aa64ebfc48ef

  • SHA256

    1130145b823d2a6f7c455426c70b3d982c16ca4870407d271ad5777862e14b68

  • SHA512

    bb820c49fade68ad842ccac424672ed2fcfebabb12aa120799b80e8d8f6207b44408f0cafc98c7caf785f1e087cc992f7724187d72ff5574aa6b282dd1f5a815

  • SSDEEP

    3072:EWpbc37+Qp2nrkGJc/J5h1Y7rCmJC0OzQaGyPZk:E9Lyc/J5h1XmJC0OzQaGyPZk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.95.169.103:2545

Targets

    • Target

      1130145b823d2a6f7c455426c70b3d982c16ca4870407d271ad5777862e14b68.elf

    • Size

      124KB

    • MD5

      e442fd349afa7de7d192201dadcc031d

    • SHA1

      8e879059233ec1957e8986f0ad20aa64ebfc48ef

    • SHA256

      1130145b823d2a6f7c455426c70b3d982c16ca4870407d271ad5777862e14b68

    • SHA512

      bb820c49fade68ad842ccac424672ed2fcfebabb12aa120799b80e8d8f6207b44408f0cafc98c7caf785f1e087cc992f7724187d72ff5574aa6b282dd1f5a815

    • SSDEEP

      3072:EWpbc37+Qp2nrkGJc/J5h1Y7rCmJC0OzQaGyPZk:E9Lyc/J5h1XmJC0OzQaGyPZk

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks