General

  • Target

    62769a4fba2728688313c050d0d43ed646e100c2af6d8fc256ac3c4d45f47f58.elf

  • Size

    99KB

  • Sample

    240411-bq6tvsbe5w

  • MD5

    643f78b00250e011f39f70f7e78f7910

  • SHA1

    0eab84a1f85afa4fe4ad0a12ea0785f948524923

  • SHA256

    62769a4fba2728688313c050d0d43ed646e100c2af6d8fc256ac3c4d45f47f58

  • SHA512

    e085c1a324b80a33968eda481ac117ac8f6954057e449c0ce0b63729d35b8815a4087b45f56e0ffda071d57a902339c0e4760bf8a0e131ef63a0c39b3a689c59

  • SSDEEP

    1536:P5XBI2uW8ZwmVZSTfBRvc11XJM8wUEHyCYI+CHhvpTmSyTahQH7S4:Pw2uWspVQTZq1AxPYI+CHvmlTayH7S4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.13.227.109:23

Targets

    • Target

      62769a4fba2728688313c050d0d43ed646e100c2af6d8fc256ac3c4d45f47f58.elf

    • Size

      99KB

    • MD5

      643f78b00250e011f39f70f7e78f7910

    • SHA1

      0eab84a1f85afa4fe4ad0a12ea0785f948524923

    • SHA256

      62769a4fba2728688313c050d0d43ed646e100c2af6d8fc256ac3c4d45f47f58

    • SHA512

      e085c1a324b80a33968eda481ac117ac8f6954057e449c0ce0b63729d35b8815a4087b45f56e0ffda071d57a902339c0e4760bf8a0e131ef63a0c39b3a689c59

    • SSDEEP

      1536:P5XBI2uW8ZwmVZSTfBRvc11XJM8wUEHyCYI+CHhvpTmSyTahQH7S4:Pw2uWspVQTZq1AxPYI+CHvmlTayH7S4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks