Overview

overview

10

Static

static

10

4e6a4110fb...55.elf

debian-9-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e6a4110fb516d060c0f72d44f56f655.elf

  • Size

    183KB

  • Sample

    240403-hkrw3sac3x

  • MD5

    4e6a4110fb516d060c0f72d44f56f655

  • SHA1

    9eba448891796ac632d40c25eccf3154fc8c28b5

  • SHA256

    6f5cf8797e573c3e0ac928aa48155089b43bfd60c5e467d8117065b0d7010c23

  • SHA512

    c594892630cd3fcb24d855e3bc7b5066cd3528d8186c3c74755e596a9749523b9f7db71652a1c1bb3ce8ec3425950db2cd6fbde809e2d7bbe97a07581ad5e154

  • SSDEEP

    3072:aaF7XSy6Cv9RDQ5hCs1ZQhmv8uqx1BVnKoe:aICGVFQ5hCZhmv8uqx1BVnKoe

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.140:777

Targets

    • Target

      4e6a4110fb516d060c0f72d44f56f655.elf

    • Size

      183KB

    • MD5

      4e6a4110fb516d060c0f72d44f56f655

    • SHA1

      9eba448891796ac632d40c25eccf3154fc8c28b5

    • SHA256

      6f5cf8797e573c3e0ac928aa48155089b43bfd60c5e467d8117065b0d7010c23

    • SHA512

      c594892630cd3fcb24d855e3bc7b5066cd3528d8186c3c74755e596a9749523b9f7db71652a1c1bb3ce8ec3425950db2cd6fbde809e2d7bbe97a07581ad5e154

    • SSDEEP

      3072:aaF7XSy6Cv9RDQ5hCs1ZQhmv8uqx1BVnKoe:aICGVFQ5hCZhmv8uqx1BVnKoe

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks