General

  • Target

    92cfcd34d5d449a1cb3c266c7001b13c.elf

  • Size

    183KB

  • Sample

    240402-hal8vaac5y

  • MD5

    92cfcd34d5d449a1cb3c266c7001b13c

  • SHA1

    0ac780cafb653f224a75b5204fa02293e9c80cea

  • SHA256

    49fd252da53b26b52952c9b639c81052f4baefd3f7aab967ff11bebc714bca0a

  • SHA512

    420c7ae8642bc2a92bf141425bc6f1c8988f5c1a5357048f25f4408d17d9ad1fa1d4ec4917a8561e4daa117ae20968ea1726f172b5f1ddfc1521514190857dcc

  • SSDEEP

    3072:aaF7XSy6Cv9RDf5his1ZPhmv8uqx1BVnKoe:aICGVFf5hi2hmv8uqx1BVnKoe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

92.249.48.166:23

Targets

    • Target

      92cfcd34d5d449a1cb3c266c7001b13c.elf

    • Size

      183KB

    • MD5

      92cfcd34d5d449a1cb3c266c7001b13c

    • SHA1

      0ac780cafb653f224a75b5204fa02293e9c80cea

    • SHA256

      49fd252da53b26b52952c9b639c81052f4baefd3f7aab967ff11bebc714bca0a

    • SHA512

      420c7ae8642bc2a92bf141425bc6f1c8988f5c1a5357048f25f4408d17d9ad1fa1d4ec4917a8561e4daa117ae20968ea1726f172b5f1ddfc1521514190857dcc

    • SSDEEP

      3072:aaF7XSy6Cv9RDf5his1ZPhmv8uqx1BVnKoe:aICGVFf5hi2hmv8uqx1BVnKoe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks