General

  • Target

    084d4720186673c63a5ab80da878ff2aee141e52b3b3372004596e603f5f27be.elf

  • Size

    168KB

  • Sample

    240428-bd6y4acg7w

  • MD5

    9f9730775b3c91bd9ff754a5b2d63afd

  • SHA1

    d4b26c5fda2b06a7ea408536b2d1825ff3622c38

  • SHA256

    084d4720186673c63a5ab80da878ff2aee141e52b3b3372004596e603f5f27be

  • SHA512

    50005c3bfbfc5bfe062e61ba4eb5251fae0be94c54e764a8c2c12ec28c15350b25a769d0476e0f031e42a1a747f58f4229cf5059cd60c65a32b77565d45847e7

  • SSDEEP

    3072:wM7j3urga8rGzarvjNmqXT7cCEAqmuZVkfP5Al:wMn0ga0rvjNmSTU/muZVkn5Al

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

2.58.95.131:65481

Targets

    • Target

      084d4720186673c63a5ab80da878ff2aee141e52b3b3372004596e603f5f27be.elf

    • Size

      168KB

    • MD5

      9f9730775b3c91bd9ff754a5b2d63afd

    • SHA1

      d4b26c5fda2b06a7ea408536b2d1825ff3622c38

    • SHA256

      084d4720186673c63a5ab80da878ff2aee141e52b3b3372004596e603f5f27be

    • SHA512

      50005c3bfbfc5bfe062e61ba4eb5251fae0be94c54e764a8c2c12ec28c15350b25a769d0476e0f031e42a1a747f58f4229cf5059cd60c65a32b77565d45847e7

    • SSDEEP

      3072:wM7j3urga8rGzarvjNmqXT7cCEAqmuZVkfP5Al:wMn0ga0rvjNmSTU/muZVkn5Al

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks