Overview

overview

10

Static

static

10

6b2df2a357...1a.elf

ubuntu-20.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    7fe712155caf0c561643878f80731d9b.bin

  • Size

    44KB

  • Sample

    240329-cryejsfb4z

  • MD5

    5117c118614514e2c2fc6fd09e29f7f5

  • SHA1

    83d085857e160704e90e6d792ac91f07648a9cf7

  • SHA256

    5b541c07f00b8b5664b9eb5a54048a49e2127133a6236fb1878857200c4aadc9

  • SHA512

    103cb0730e4e34d1324cc2acbc017086c1d05023df24fdd87dc00474a3fb60d10dd8fa1b201818a5188a44dd743717c179f09aa6662fa0498bc3cc0ac73983ae

  • SSDEEP

    768:dqaOqooCRqMYkOlM3TPIURe9xXSCWtwE5/SLFv9o+YWrjRlu0f8PnuSysU:ddOqoo6NYkEUTP5UZSCMwE5GFv9o+YWJ

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

45.145.42.90:4444

Targets

    • Target

      6b2df2a357c8479af1e0c29be5b979dc6718f9e7a96649fb8c82dab81f02ea1a.elf

    • Size

      98KB

    • MD5

      7fe712155caf0c561643878f80731d9b

    • SHA1

      e66eeefc148e0c6cfd2025c8b83a77e200ef533d

    • SHA256

      6b2df2a357c8479af1e0c29be5b979dc6718f9e7a96649fb8c82dab81f02ea1a

    • SHA512

      aa5e4029d3591900747355db150f8d6b9b1ea9afe4fac3fd715cd7c7aaf838d0f3bd70df453612417f8c41535781244dd1bba44665ea242ccee222baeb51e2c6

    • SSDEEP

      3072:JZjKLz70ZyE6y0kjC/p59eCi+mITSfHfr/:F6YO0ClmITS/fr/

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks