Overview

overview

10

Static

static

10

fd3f0ccdbb...bf.elf

debian-12-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    fd3f0ccdbbf4dddca9aab0883d7c0abf.elf
  • Size 150KB
  • Sample240401-w1f2eaca45
  • SHA256 6e6d31e5b9a61454a66a24114583d5bdc3d7f2472bfea10fb639580fc058a1c8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgyt

Malware Config

Extracted

Family

  • gafgyt

C2

  • 94.156.64.4:42516

Targets

    • Target
      fd3f0ccdbbf4dddca9aab0883d7c0abf.elf
    • Size 150KB
    • SHA256 6e6d31e5b9a61454a66a24114583d5bdc3d7f2472bfea10fb639580fc058a1c8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Changes its process name

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks