General

  • Target

    f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf

  • Size

    188KB

  • Sample

    240316-djne2scc93

  • MD5

    85e555a1a9164a2e34557421db938ebc

  • SHA1

    53335c157b284a52a925b2ae7811a5f2f30bbf98

  • SHA256

    f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60

  • SHA512

    6d6ad5930bc241f4e579c53b45a228b7e76f38ae8959748d798adbb08855a0874227f96601c2cc5b1ad326923ab8a3c2605628da63deadfda97e1a8163163c03

  • SSDEEP

    3072:xHWSb+eerH8csrW5hZxZOwBzhmv8uqx1LVnKoe:tkr49W5hZxZOwRhmv8uqx1LVnKoe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

78.40.117.218:23

Targets

    • Target

      f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf

    • Size

      188KB

    • MD5

      85e555a1a9164a2e34557421db938ebc

    • SHA1

      53335c157b284a52a925b2ae7811a5f2f30bbf98

    • SHA256

      f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60

    • SHA512

      6d6ad5930bc241f4e579c53b45a228b7e76f38ae8959748d798adbb08855a0874227f96601c2cc5b1ad326923ab8a3c2605628da63deadfda97e1a8163163c03

    • SSDEEP

      3072:xHWSb+eerH8csrW5hZxZOwBzhmv8uqx1LVnKoe:tkr49W5hZxZOwRhmv8uqx1LVnKoe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks