General

  • Target

    3eb25d044fb833b270d5163127bc81345355829fe53ebc27ac50334eb3f162ee.elf

  • Size

    86KB

  • Sample

    240425-bqklmach4x

  • MD5

    5bd0bb524ad5748d5a8f10480958dd26

  • SHA1

    47317d179cb71df437f2b9549b19a895fe5c27c7

  • SHA256

    3eb25d044fb833b270d5163127bc81345355829fe53ebc27ac50334eb3f162ee

  • SHA512

    3ddb81bbfdad59539c86e4379495b2c801842ef1b44f81900bc537c9b606946bc468fa00781da1c41189b5a09d2bcb6ccb2ac988a76b01d47ee8c12ad73ecf1a

  • SSDEEP

    1536:/DNFUsUIFCsHe5lym901ZNEmwvlFAuNddXi3apx8g1jxfqdm6rjd6VCYjpA:/DNFUsU6bHet9017LwvlFLdXi3PmEjdR

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

2.58.95.131:65480

Targets

    • Target

      3eb25d044fb833b270d5163127bc81345355829fe53ebc27ac50334eb3f162ee.elf

    • Size

      86KB

    • MD5

      5bd0bb524ad5748d5a8f10480958dd26

    • SHA1

      47317d179cb71df437f2b9549b19a895fe5c27c7

    • SHA256

      3eb25d044fb833b270d5163127bc81345355829fe53ebc27ac50334eb3f162ee

    • SHA512

      3ddb81bbfdad59539c86e4379495b2c801842ef1b44f81900bc537c9b606946bc468fa00781da1c41189b5a09d2bcb6ccb2ac988a76b01d47ee8c12ad73ecf1a

    • SSDEEP

      1536:/DNFUsUIFCsHe5lym901ZNEmwvlFAuNddXi3apx8g1jxfqdm6rjd6VCYjpA:/DNFUsU6bHet9017LwvlFLdXi3PmEjdR

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Matrix ATT&CK v13

Tasks