General

  • Target

    cd3da51087f1272517d29305b9350dbe.elf

  • Size

    92KB

  • Sample

    240224-gvwgksbe77

  • MD5

    cd3da51087f1272517d29305b9350dbe

  • SHA1

    637cb2cbbb6cd299850a25c155d19c2148b19595

  • SHA256

    6e548202193041ec2a577f9d5ed1447514de4a386278a8981ee39fef2c3a483f

  • SHA512

    805774886cc344514980444152d1963b5b33c81cb3113d9a98bc3d28f6c7aceb53ae1e4beefb1847826fc745bd3c8a35581e84864f66c0366548bd2c4275e03b

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3myPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKWifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.8.179:671

Targets

    • Target

      cd3da51087f1272517d29305b9350dbe.elf

    • Size

      92KB

    • MD5

      cd3da51087f1272517d29305b9350dbe

    • SHA1

      637cb2cbbb6cd299850a25c155d19c2148b19595

    • SHA256

      6e548202193041ec2a577f9d5ed1447514de4a386278a8981ee39fef2c3a483f

    • SHA512

      805774886cc344514980444152d1963b5b33c81cb3113d9a98bc3d28f6c7aceb53ae1e4beefb1847826fc745bd3c8a35581e84864f66c0366548bd2c4275e03b

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3myPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKWifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks