Overview

overview

10

Static

static

10

97cf5198be...7f.elf

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    20ac928a32d7259907e93b82c7a9a046.bin
  • Size 67KB
  • Sample240331-bgt4psba2v
  • SHA256 57e5c44ca33d338d54177becc588ffa4187b5cebf6f870acd72018a57ffc1999
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgytupx

Malware Config

Extracted

Family

  • gafgyt

C2

  • 193.35.18.56:65490

Targets

    • Target
      97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f.elf
    • Size 162KB
    • SHA256 97cf5198be05d13e85a49e4720b2050f2af110ae775bcd6c180391e8853ecd7f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks