General

  • Target

    4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf

  • Size

    71KB

  • Sample

    240411-blff4sbc9s

  • MD5

    b82fda95d1bc28aa69e2f276538c8d9e

  • SHA1

    97acf99ad28734e9df6876c1f8545d60a38bbf0c

  • SHA256

    4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9

  • SHA512

    e0d604aac8b5a50cf4b8333c8858d8fae7a25bb5ac58b4e4db04c42028396bfd4703c267be31480af7e5f450a40a78beb571428d15e9970454cb99cfd193839d

  • SSDEEP

    1536:hIxMrhJX9gW2CvPAaSyAuWPuqhkcyEnmx+LVO049unnuY:4MrhJXeW2CXAaoXWojyQm4LVO0iunnuY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

38.89.76.175:61915

Targets

    • Target

      4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9.elf

    • Size

      71KB

    • MD5

      b82fda95d1bc28aa69e2f276538c8d9e

    • SHA1

      97acf99ad28734e9df6876c1f8545d60a38bbf0c

    • SHA256

      4317da3436c1ad0d5f52a7edeebdf63b1727db49e87a551b06aed231389b85d9

    • SHA512

      e0d604aac8b5a50cf4b8333c8858d8fae7a25bb5ac58b4e4db04c42028396bfd4703c267be31480af7e5f450a40a78beb571428d15e9970454cb99cfd193839d

    • SSDEEP

      1536:hIxMrhJX9gW2CvPAaSyAuWPuqhkcyEnmx+LVO049unnuY:4MrhJXeW2CXAaoXWojyQm4LVO0iunnuY

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks