Overview

overview

10

Static

static

10

efe38c16ac...0e.elf

debian-9-mipsel

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    efe38c16ac3ac7c440594e98ac5c750e.elf

  • Size

    188KB

  • Sample

    240315-v92h2agf83

  • MD5

    efe38c16ac3ac7c440594e98ac5c750e

  • SHA1

    6f10f3bd20a2b8a626e83033d7bbe06ba00996a1

  • SHA256

    6951d74f14687b746efb6bd6b1e1413a25d2fc8627542cd602f8184ee4652f7e

  • SHA512

    d2913530a5a46b7b73717372b40b015567c5c56b6a52ef31a5f91c918318bea08991f8100dd69923d22245356e85406f538ded6a8134df12dcf45f415cb03557

  • SSDEEP

    3072:CTF0suwcqQtKYHrIG5hVC0SR/hmv8uqx1LVnKoe:Cesuwo1LIG5hV6R/hmv8uqx1LVnKoe

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

78.40.117.218:23

Targets

    • Target

      efe38c16ac3ac7c440594e98ac5c750e.elf

    • Size

      188KB

    • MD5

      efe38c16ac3ac7c440594e98ac5c750e

    • SHA1

      6f10f3bd20a2b8a626e83033d7bbe06ba00996a1

    • SHA256

      6951d74f14687b746efb6bd6b1e1413a25d2fc8627542cd602f8184ee4652f7e

    • SHA512

      d2913530a5a46b7b73717372b40b015567c5c56b6a52ef31a5f91c918318bea08991f8100dd69923d22245356e85406f538ded6a8134df12dcf45f415cb03557

    • SSDEEP

      3072:CTF0suwcqQtKYHrIG5hVC0SR/hmv8uqx1LVnKoe:Cesuwo1LIG5hV6R/hmv8uqx1LVnKoe

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks