General

  • Target

    5d2a0462b16347a2863a8249b0b45ef457f6016eafbeca3fdc252a3c347b5b22.elf

  • Size

    85KB

  • Sample

    240429-bngf7aed4x

  • MD5

    3ce6c7bc288443922a3c38593e9fffec

  • SHA1

    f97a065a5149ced70e04b6bfcc06e92ae4220d1f

  • SHA256

    5d2a0462b16347a2863a8249b0b45ef457f6016eafbeca3fdc252a3c347b5b22

  • SHA512

    9bb270add54bb15740edab1821abd857360c5d2908b5e71c61f711b2d67a89f9a334da4fd5cabd0acc9a5284a16942d73d3406b2978a9001821448686e3fbc50

  • SSDEEP

    1536:x3oLQ5TCzSVYERb1aGy8gwi5vaMbBZzp6+m5CsNFPVYLf0:d8Q5Tv+U5aH8VkCMfp7mwsN1VYLf0

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.42.102.198:666

Targets

    • Target

      5d2a0462b16347a2863a8249b0b45ef457f6016eafbeca3fdc252a3c347b5b22.elf

    • Size

      85KB

    • MD5

      3ce6c7bc288443922a3c38593e9fffec

    • SHA1

      f97a065a5149ced70e04b6bfcc06e92ae4220d1f

    • SHA256

      5d2a0462b16347a2863a8249b0b45ef457f6016eafbeca3fdc252a3c347b5b22

    • SHA512

      9bb270add54bb15740edab1821abd857360c5d2908b5e71c61f711b2d67a89f9a334da4fd5cabd0acc9a5284a16942d73d3406b2978a9001821448686e3fbc50

    • SSDEEP

      1536:x3oLQ5TCzSVYERb1aGy8gwi5vaMbBZzp6+m5CsNFPVYLf0:d8Q5Tv+U5aH8VkCMfp7mwsN1VYLf0

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks