General

  • Target

    080ac9573cef252446c672757fe09f3c.elf

  • Size

    124KB

  • Sample

    240402-g9gxqsac4v

  • MD5

    080ac9573cef252446c672757fe09f3c

  • SHA1

    537a9947bcdbdf800c9f772555fc70cbfe5fd36d

  • SHA256

    2cfa87d85fee32a220fb2798f8551525c8e2b2901b15048f34d86ec03f3d415c

  • SHA512

    dc5d6e24e8675dada12c18bc397ee8f32903b804437329102e9b717f933f89d048d4a348face5d4dd500321e29d69d74462986118a5267a5ad2fdf0724ef7bb2

  • SSDEEP

    3072:EWpbc37+Qp2nrkGJc/R5h1Y7rCmJC0OzQaGyPZk:E9Lyc/R5h1XmJC0OzQaGyPZk

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.156.8.109:671

Targets

    • Target

      080ac9573cef252446c672757fe09f3c.elf

    • Size

      124KB

    • MD5

      080ac9573cef252446c672757fe09f3c

    • SHA1

      537a9947bcdbdf800c9f772555fc70cbfe5fd36d

    • SHA256

      2cfa87d85fee32a220fb2798f8551525c8e2b2901b15048f34d86ec03f3d415c

    • SHA512

      dc5d6e24e8675dada12c18bc397ee8f32903b804437329102e9b717f933f89d048d4a348face5d4dd500321e29d69d74462986118a5267a5ad2fdf0724ef7bb2

    • SSDEEP

      3072:EWpbc37+Qp2nrkGJc/R5h1Y7rCmJC0OzQaGyPZk:E9Lyc/R5h1XmJC0OzQaGyPZk

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks