General

  • Target

    4197e002bf39bef8cb338cfa18b3be63.elf

  • Size

    131KB

  • Sample

    240310-xxmkfsad49

  • MD5

    4197e002bf39bef8cb338cfa18b3be63

  • SHA1

    f05692fef559d34b6a0baac4ffe6e2b7ee21cee7

  • SHA256

    ab74b4b726b330617127e21d4eef75d068f0c8935991a4a213c0ded1f12a407c

  • SHA512

    438be188d47947cb76d68dcc4fadd0f2478f2805b5e6609ac63726d09bff52dfdde7ec043271ca4751df3674aff4977037b0fb9471fb8cff72bd2d253aa70534

  • SSDEEP

    1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqovd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1/vdlPUmkASFxBKvXZX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

103.173.255.143:839

Targets

    • Target

      4197e002bf39bef8cb338cfa18b3be63.elf

    • Size

      131KB

    • MD5

      4197e002bf39bef8cb338cfa18b3be63

    • SHA1

      f05692fef559d34b6a0baac4ffe6e2b7ee21cee7

    • SHA256

      ab74b4b726b330617127e21d4eef75d068f0c8935991a4a213c0ded1f12a407c

    • SHA512

      438be188d47947cb76d68dcc4fadd0f2478f2805b5e6609ac63726d09bff52dfdde7ec043271ca4751df3674aff4977037b0fb9471fb8cff72bd2d253aa70534

    • SSDEEP

      1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqovd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1/vdlPUmkASFxBKvXZX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks