General

  • Target

    d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2.elf

  • Size

    85KB

  • Sample

    240423-ceweesbd24

  • MD5

    92734907209050c876a1394d26fd5a6c

  • SHA1

    7a1df979212e98f4fa92f9a06ad7c39eddbff9af

  • SHA256

    d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2

  • SHA512

    bc833b0d0f7aa064a47f3c0d57d2ce7cc76f832c69693bd3422f5a3f6471ca15b6fba88e0e3336a6538dcb31525921c7d954767588085e5c47a0f99be0a169f1

  • SSDEEP

    1536:z+QctUQUnvVdkp1zq7DZp8yU8eueA9BCTFl3V99KmTMbSXmQTse6MCYka9:z+QctUQUnvV/7DLU8eu9Bk3V99Klb6mu

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.92.245.31:67

Targets

    • Target

      d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2.elf

    • Size

      85KB

    • MD5

      92734907209050c876a1394d26fd5a6c

    • SHA1

      7a1df979212e98f4fa92f9a06ad7c39eddbff9af

    • SHA256

      d85483d7baa93567e66160268d77f2971f8a923f60fafa311214c0bfea71d6e2

    • SHA512

      bc833b0d0f7aa064a47f3c0d57d2ce7cc76f832c69693bd3422f5a3f6471ca15b6fba88e0e3336a6538dcb31525921c7d954767588085e5c47a0f99be0a169f1

    • SSDEEP

      1536:z+QctUQUnvVdkp1zq7DZp8yU8eueA9BCTFl3V99KmTMbSXmQTse6MCYka9:z+QctUQUnvV/7DLU8eu9Bk3V99Klb6mu

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks