General

  • Target

    8da59994df48e19fc40b98c4d2911d55.elf

  • Size

    82KB

  • Sample

    240405-t5dezaha6t

  • MD5

    8da59994df48e19fc40b98c4d2911d55

  • SHA1

    22d109fb20d14b7d8315e190c7b6db84df24e80f

  • SHA256

    dc77aad4fb65c2fd261dfa46d80cd636ca9511f83f08a1a047291dd11f9aa7a7

  • SHA512

    a0e7681951ab6a84a97aacdfa665cc5d258ccbaa76f1d2f29b353c14a73c21968366d9cfa00582356c96545c11803c926b48d62f3ecfdb4f7c5b32551c3102d3

  • SSDEEP

    1536:B5WKd4df4WaM6KwNHXyzgiADiN7oSHOd1VDAIPhxxTxDKQ7P:B5mddx6KwNHizE2N7VHsVDjPhxxlDKQ7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

141.11.228.23:65483

Targets

    • Target

      8da59994df48e19fc40b98c4d2911d55.elf

    • Size

      82KB

    • MD5

      8da59994df48e19fc40b98c4d2911d55

    • SHA1

      22d109fb20d14b7d8315e190c7b6db84df24e80f

    • SHA256

      dc77aad4fb65c2fd261dfa46d80cd636ca9511f83f08a1a047291dd11f9aa7a7

    • SHA512

      a0e7681951ab6a84a97aacdfa665cc5d258ccbaa76f1d2f29b353c14a73c21968366d9cfa00582356c96545c11803c926b48d62f3ecfdb4f7c5b32551c3102d3

    • SSDEEP

      1536:B5WKd4df4WaM6KwNHXyzgiADiN7oSHOd1VDAIPhxxTxDKQ7P:B5mddx6KwNHizE2N7VHsVDjPhxxlDKQ7

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks