General

  • Target

    6c9c173d5823958af284d262d98f99df.elf

  • Size

    120KB

  • Sample

    240402-g2lwqaaf72

  • MD5

    6c9c173d5823958af284d262d98f99df

  • SHA1

    702c310f9854542ce0ad31d7302d96da83e8a24d

  • SHA256

    710aa18ac6b2186650ffd1388a1200204b0c6250304bcfe520bea8d2bc6c8b31

  • SHA512

    176a17d5e904a88fdb093c50d726b16fb54e1742e26cde5f739c894940b99f1bdbdd1edaf80409fb5740220cd5dbe5df1057e0e78bf2c8484328076d638a4058

  • SSDEEP

    3072:SNhAfn3U8UXULUwUbUJ1hYlHRRDsBOnRg5hgkEemJC0OzQaGyPZk:SMf3ts05gehYlxO4Rg5hgEmJC0OzQaGN

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.8.109:671

Targets

    • Target

      6c9c173d5823958af284d262d98f99df.elf

    • Size

      120KB

    • MD5

      6c9c173d5823958af284d262d98f99df

    • SHA1

      702c310f9854542ce0ad31d7302d96da83e8a24d

    • SHA256

      710aa18ac6b2186650ffd1388a1200204b0c6250304bcfe520bea8d2bc6c8b31

    • SHA512

      176a17d5e904a88fdb093c50d726b16fb54e1742e26cde5f739c894940b99f1bdbdd1edaf80409fb5740220cd5dbe5df1057e0e78bf2c8484328076d638a4058

    • SSDEEP

      3072:SNhAfn3U8UXULUwUbUJ1hYlHRRDsBOnRg5hgkEemJC0OzQaGyPZk:SMf3ts05gehYlxO4Rg5hgEmJC0OzQaGN

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks