General

  • Target

    cf85fb4e6139f12914e30a8bedb52a5a.elf

  • Size

    183KB

  • Sample

    240402-g1191saf64

  • MD5

    cf85fb4e6139f12914e30a8bedb52a5a

  • SHA1

    9faef9802001a822493adca959cf18f57d6af9d7

  • SHA256

    47b6b6eacf2b5d74e2cb0bc94ab3f93c7475ebe4669d2a4fd1d1186cfb9a3aaf

  • SHA512

    0eaeade2a25ed9146bd041369b8005dec1471ebc5c8e670819e8ba87027a958a82738ecc433c04ce80e1044c4ebb8f67d3ca2fc36c57c676f042fe976befbeae

  • SSDEEP

    3072:UhZRj5n9EmzUyMhD5hWTt5s1qAuhmv8uqx1BVnKoe:mjrYZD5hWJ5Lhmv8uqx1BVnKoe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.8.109:671

Targets

    • Target

      cf85fb4e6139f12914e30a8bedb52a5a.elf

    • Size

      183KB

    • MD5

      cf85fb4e6139f12914e30a8bedb52a5a

    • SHA1

      9faef9802001a822493adca959cf18f57d6af9d7

    • SHA256

      47b6b6eacf2b5d74e2cb0bc94ab3f93c7475ebe4669d2a4fd1d1186cfb9a3aaf

    • SHA512

      0eaeade2a25ed9146bd041369b8005dec1471ebc5c8e670819e8ba87027a958a82738ecc433c04ce80e1044c4ebb8f67d3ca2fc36c57c676f042fe976befbeae

    • SSDEEP

      3072:UhZRj5n9EmzUyMhD5hWTt5s1qAuhmv8uqx1BVnKoe:mjrYZD5hWJ5Lhmv8uqx1BVnKoe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks