Overview

overview

10

Static

static

10

e4d0ac1e6a...a6.elf

debian-9-armhf

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba86cf49f6c2ddae1ab960deade99da2.bin

  • Size

    55KB

  • Sample

    240410-b812bsfa8t

  • MD5

    38f8b2d4b673f59b1e6347ae7d6291f7

  • SHA1

    9cb2f1d5b49dbe48f27ea5d4db69d378981c01eb

  • SHA256

    1144d8fbf0e781c9c935f78ee0d63316fe855aeb46cb019c160aed373b4798fa

  • SHA512

    39d2afe9a495d00e8d2a89bb5723cfa00bdd21d829739d45640e9c6006579198779d03b160d159ff1cc51e508dc947fa8e2e997ced91d5fa03b4d8070cc5bbea

  • SSDEEP

    1536:8wVWXlkmCnIgMQk7UYBikYMy+KwQwDXT0:tWVkm6IgwZikcrwP0

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.170:4444

Targets

    • Target

      e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf

    • Size

      145KB

    • MD5

      ba86cf49f6c2ddae1ab960deade99da2

    • SHA1

      2c5b86f83cf9fc196e5d2a0886507e708a5cf2c2

    • SHA256

      e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6

    • SHA512

      0710854b986a15cf9e09a7d3d3396ca75c6a23e1cac8584ff5c6513070397fe519ce308742f6699887f47e88816c98dc119e2926d69e1c48e1cac6d86177da71

    • SSDEEP

      3072:6hlLp1zWvkO0PXs/DiW1VrdD5hc8eoadVjkmOMDQ4DtsL6Qse:O7J8/Di2RD5hc8eFkmOMDQ4DtsL6Qse

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks