Overview

overview

10

Static

static

10

39c6bbe7ca...df.elf

ubuntu-18.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    76da29e196d3f0969377a38ccaf7b6e1.bin

  • Size

    45KB

  • Sample

    240427-by4dpshb7x

  • MD5

    88e98a218a003e0bc658945537fd4711

  • SHA1

    4aa1943572c82d691d2b8ef4455a9a7c7a1786f9

  • SHA256

    0e5a0f534cb3566f48fe26f23c0bb5c353e8618930daeb61d3a69c55485998e4

  • SHA512

    9d25ee75b884936cefcf006d5bbdaed711b128c02ef7a3623a7ee5da84928f35266676f33d56aa39c2a831b22c26b024aef9fff69e8d2ab788eb1e13835c19b9

  • SSDEEP

    768:1ZKpP4zOoKP3toGoZa3OKqEd9pnyR0U56WPoTiX3CJZfyy6Zv1a2RkZ5OEkIo/f8:1PrKP3udZRK1PnwFnPR30ZfyVZvLyDq8

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

2.58.95.131:65480

Targets

    • Target

      39c6bbe7ca9f6929af5e412df29e6e0067d2ba2bfe4651cade1fc2bc471c01df.elf

    • Size

      102KB

    • MD5

      76da29e196d3f0969377a38ccaf7b6e1

    • SHA1

      046c63eab78322f08f5115ac6041f4b7c345b0bf

    • SHA256

      39c6bbe7ca9f6929af5e412df29e6e0067d2ba2bfe4651cade1fc2bc471c01df

    • SHA512

      31a289fe576a1322b57ddc6b77656bc315b1f3e9bd5780a363fa2fa0fc3f24914d14f568c3b9841aefcc4e6b1003433bd40bfd56d90716e6c55aff59dc2eefdd

    • SSDEEP

      3072:3t/vIWFucnn1L9jrNm20pA8Py6WaUPmH23ZHaDn:dlN1mDpz3UPmH235aDn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks