Overview

overview

10

Static

static

10

4e1b008eda...52.elf

debian-12-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    e1999a446f33992721b9df541f3fe535.bin
  • Size 53KB
  • Sample240331-cekb6acc86
  • SHA256 573561a7ae1c5e316831f1702d6ef9f71501ffba7c3a62932668b9de3e6f9ccd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgytupx

Malware Config

Extracted

Family

  • gafgyt

C2

  • 193.35.18.56:65490

Targets

    • Target
      4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52.elf
    • Size 154KB
    • SHA256 4e1b008eda17d2c057157e0c6d533d7948729d31e0d76c4cbfc8a565236e4d52
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Changes its process name

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks