Overview

overview

10

Static

static

10

f2ae403429...60.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85e555a1a9164a2e34557421db938ebc.bin

  • Size

    55KB

  • Sample

    240317-dd7lqscg85

  • MD5

    e91b0d78693c8bc9ef2e8ee8421a59be

  • SHA1

    fe9c1fa52a524e3d6896d429378369abf7763b13

  • SHA256

    93589f5a2b47aefec269380b5906fbfbb866c48b1f1e9ea87307822ebd05d7ed

  • SHA512

    ffd8b7a3bde1158c40d618b89409ac00a0015509c41e9e79a0df85721c790ecd44a37fb28a1a979e4f259b05928188d87f93e89c3048d5c72e854ada4d54f0ec

  • SSDEEP

    1536:KC89vakWtN/RMdXyjpeKrruLtt4OBvAxnH2/SkIv5LrZQ:lCWLRqXyVruZt4OBvwNV5S

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

78.40.117.218:23

Targets

    • Target

      f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf

    • Size

      188KB

    • MD5

      85e555a1a9164a2e34557421db938ebc

    • SHA1

      53335c157b284a52a925b2ae7811a5f2f30bbf98

    • SHA256

      f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60

    • SHA512

      6d6ad5930bc241f4e579c53b45a228b7e76f38ae8959748d798adbb08855a0874227f96601c2cc5b1ad326923ab8a3c2605628da63deadfda97e1a8163163c03

    • SSDEEP

      3072:xHWSb+eerH8csrW5hZxZOwBzhmv8uqx1LVnKoe:tkr49W5hZxZOwRhmv8uqx1LVnKoe

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks