Overview

overview

10

Static

static

10

67d89e0869...91.elf

ubuntu-20.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67d89e0869d940137c69a4c864cd1b6f03ed7e3154c3830c8b920fe1506b5c91.elf

  • Size

    139KB

  • Sample

    240425-bzfc9sch85

  • MD5

    4dd47d55b91a71c10154f09a550117a5

  • SHA1

    108833751091cd88496062cc9516a94c0d6c2df9

  • SHA256

    67d89e0869d940137c69a4c864cd1b6f03ed7e3154c3830c8b920fe1506b5c91

  • SHA512

    1349fca53e968ae6dfe8b3047f36620a9b390c7635410f8dac582358fd40904668067b70560b9510594edff70c3701b7a08d7d5abd362c5ec852e51cac757295

  • SSDEEP

    3072:iG9VA/hmEMipV3SwwaY5zjK5hCxSttb0mJswdytNr9:iBdD3wjK5hjImJswdytNr9

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.78:55

Targets

    • Target

      67d89e0869d940137c69a4c864cd1b6f03ed7e3154c3830c8b920fe1506b5c91.elf

    • Size

      139KB

    • MD5

      4dd47d55b91a71c10154f09a550117a5

    • SHA1

      108833751091cd88496062cc9516a94c0d6c2df9

    • SHA256

      67d89e0869d940137c69a4c864cd1b6f03ed7e3154c3830c8b920fe1506b5c91

    • SHA512

      1349fca53e968ae6dfe8b3047f36620a9b390c7635410f8dac582358fd40904668067b70560b9510594edff70c3701b7a08d7d5abd362c5ec852e51cac757295

    • SSDEEP

      3072:iG9VA/hmEMipV3SwwaY5zjK5hCxSttb0mJswdytNr9:iBdD3wjK5hjImJswdytNr9

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks