General

  • Target

    40d63a0757e8dde632c5b9fba70a6267.elf

  • Size

    149KB

  • Sample

    240315-v92h2agf84

  • MD5

    40d63a0757e8dde632c5b9fba70a6267

  • SHA1

    874959e3178d3a92dfbbc9b9f8480939376e1605

  • SHA256

    d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939

  • SHA512

    ca22ddafe06163c13935dc72f4ac4d7b4e1600aa0f9a47b37d577b4cb869fd256eb0a9a55a52df0607e13077708d5f0dce6177b608291ec24b6be663a7599a03

  • SSDEEP

    3072:p+BnodZnZcBpaLrEJZTVKhv5hKEeu0sCXOmOMDQ4DzsL6Qse:pqbDJZhCv5hKEeOcOmOMDQ4DzsL6Qse

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.40.117.218:23

Targets

    • Target

      40d63a0757e8dde632c5b9fba70a6267.elf

    • Size

      149KB

    • MD5

      40d63a0757e8dde632c5b9fba70a6267

    • SHA1

      874959e3178d3a92dfbbc9b9f8480939376e1605

    • SHA256

      d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939

    • SHA512

      ca22ddafe06163c13935dc72f4ac4d7b4e1600aa0f9a47b37d577b4cb869fd256eb0a9a55a52df0607e13077708d5f0dce6177b608291ec24b6be663a7599a03

    • SSDEEP

      3072:p+BnodZnZcBpaLrEJZTVKhv5hKEeu0sCXOmOMDQ4DzsL6Qse:pqbDJZhCv5hKEeOcOmOMDQ4DzsL6Qse

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks