Overview

overview

10

Static

static

10

1103eec2ca...e0.elf

ubuntu-18.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7af3de8074e94cbbdfa2decf4e3dbe2.bin

  • Size

    44KB

  • Sample

    240411-cftl8ace9z

  • MD5

    7fd428856dee36192a60227e46cdd715

  • SHA1

    39040c0737b23ec3cf9153518beffa48a46613e0

  • SHA256

    00dcf7003a30169275ed37851436a689b082e459af6e0f3e6013f826bf6a8a1f

  • SHA512

    8aa7b8cd61e95908b24954a445340020722e88c9b913e5231655848ea03216a667dac2bea234ed620589c670e8722d94282b192170c9a2380afd361fac7e81bc

  • SSDEEP

    768:TzW6NMqCFu0S2nvTX3C7Zf++RWjllUbfg4+AzWl6UuO9GhTDpxQ4mRhC+d7urZ:TCwCFnbClcjjyfg4Bit09pxKd7+Z

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

91.92.240.123:999

Targets

    • Target

      1103eec2ca3d9dc46ead77fec120d56c6526a4912e36a417139851df45661ce0.elf

    • Size

      104KB

    • MD5

      f7af3de8074e94cbbdfa2decf4e3dbe2

    • SHA1

      1a7ce2a2d4beb3ba954272368ef75fb4d8b417bc

    • SHA256

      1103eec2ca3d9dc46ead77fec120d56c6526a4912e36a417139851df45661ce0

    • SHA512

      0600f152c9f4afbabeaa3565060dde4154897ca41bcb90800e0965e31c0e26ddde6e72793c57f5e79bc542f25b69502f7f059a816e490b9d23946d970008f96a

    • SSDEEP

      3072:HXBWIqNMdT6zzPgLT6xCWzsH7gGmhKuCXq8+ZYVQ:GMBQPgXpFmhKuCXq8+ZYVQ

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks