General

  • Target

    6abb116d2d18a5faa56e04c07183f270.elf

  • Size

    146KB

  • Sample

    240222-nd92zagc4x

  • MD5

    6abb116d2d18a5faa56e04c07183f270

  • SHA1

    d380d33485548e3816dea2346a51c9e8f0e430ef

  • SHA256

    8eaec3bb48f27902eeb97156f00c6b8aa59e13c94548fcd0a4f0c9d2cd836276

  • SHA512

    38e92328a5ee703997fe47be1d1a5d1c4c41f2e064cf83b92e1eb99424a10540b8e5720ed8c5004dc37943d52dc30addc1529c31f516d23bf8f168a5b76ae140

  • SSDEEP

    3072:fuNaNpF4uVN++dkhnxbQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnZQennCM/9ekmpwfvafZn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

104.167.221.222:555

Targets

    • Target

      6abb116d2d18a5faa56e04c07183f270.elf

    • Size

      146KB

    • MD5

      6abb116d2d18a5faa56e04c07183f270

    • SHA1

      d380d33485548e3816dea2346a51c9e8f0e430ef

    • SHA256

      8eaec3bb48f27902eeb97156f00c6b8aa59e13c94548fcd0a4f0c9d2cd836276

    • SHA512

      38e92328a5ee703997fe47be1d1a5d1c4c41f2e064cf83b92e1eb99424a10540b8e5720ed8c5004dc37943d52dc30addc1529c31f516d23bf8f168a5b76ae140

    • SSDEEP

      3072:fuNaNpF4uVN++dkhnxbQennF4M/9OD4bNWkE1kmpwfvRQfZn:mNaNpF4+NChnZQennCM/9ekmpwfvafZn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks