Overview

overview

10

Static

static

10

662e23e439...18.elf

ubuntu-18.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    662e23e43960437c1135bfaeb860bd7284a69f97316ad4b6cd6efa5c6d0ac118.elf

  • Size

    90KB

  • Sample

    240425-by4dpsda8w

  • MD5

    4e01eeae08f262b68d28967d5dfde400

  • SHA1

    2c873f6f6b0efc3807f269f1faa6c528d55d4cfd

  • SHA256

    662e23e43960437c1135bfaeb860bd7284a69f97316ad4b6cd6efa5c6d0ac118

  • SHA512

    b67dbbba0e21f2d56cb05ef96b8889ed6bacb6705ac46355c0d8c4c915ca519739bcca20c43572e4ec78f2759d29d1519cc43f08067a4ba571b4a3ca5775f7ec

  • SSDEEP

    1536:GyskudJwyaH05hfGPo5H+Hsyb5xqSViZidTmTtSHm6rjd6VCYjpA:GLhdDaU5hfGPo23b5x/ViHmmEjdeCYje

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

2.58.95.131:65480

Targets

    • Target

      662e23e43960437c1135bfaeb860bd7284a69f97316ad4b6cd6efa5c6d0ac118.elf

    • Size

      90KB

    • MD5

      4e01eeae08f262b68d28967d5dfde400

    • SHA1

      2c873f6f6b0efc3807f269f1faa6c528d55d4cfd

    • SHA256

      662e23e43960437c1135bfaeb860bd7284a69f97316ad4b6cd6efa5c6d0ac118

    • SHA512

      b67dbbba0e21f2d56cb05ef96b8889ed6bacb6705ac46355c0d8c4c915ca519739bcca20c43572e4ec78f2759d29d1519cc43f08067a4ba571b4a3ca5775f7ec

    • SSDEEP

      1536:GyskudJwyaH05hfGPo5H+Hsyb5xqSViZidTmTtSHm6rjd6VCYjpA:GLhdDaU5hfGPo23b5x/ViHmmEjdeCYje

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks