General

  • Target

    679cbf946cde90451aaa7c6ea71c5cd1.elf

  • Size

    141KB

  • Sample

    240429-qnyg2aca2s

  • MD5

    679cbf946cde90451aaa7c6ea71c5cd1

  • SHA1

    1a38e4401dc53a248c277d12479b9063ce0f8f95

  • SHA256

    9b718997c88a17e3a8ad9f671e854d69243b1fbf7a9c60bcfe2e9f8a0e98ed6d

  • SHA512

    e4df55fd515a0b98762f9ae7e47b67dab09999c27f76f60f7fad0fda6d7df0678fd4c5c5794a6b6da830391d0bea4b10528df1f0bd66290e55ff10708d398feb

  • SSDEEP

    3072:/BRB9nRvhcaHEqM5hzfrkav3Um0/5ApYADn:/jBLrEqM5hzzkCUm0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

5.42.100.119:4258

Targets

    • Target

      679cbf946cde90451aaa7c6ea71c5cd1.elf

    • Size

      141KB

    • MD5

      679cbf946cde90451aaa7c6ea71c5cd1

    • SHA1

      1a38e4401dc53a248c277d12479b9063ce0f8f95

    • SHA256

      9b718997c88a17e3a8ad9f671e854d69243b1fbf7a9c60bcfe2e9f8a0e98ed6d

    • SHA512

      e4df55fd515a0b98762f9ae7e47b67dab09999c27f76f60f7fad0fda6d7df0678fd4c5c5794a6b6da830391d0bea4b10528df1f0bd66290e55ff10708d398feb

    • SSDEEP

      3072:/BRB9nRvhcaHEqM5hzfrkav3Um0/5ApYADn:/jBLrEqM5hzzkCUm0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks