Overview

overview

10

Static

static

10

66b79fcfb7...f2.elf

ubuntu-18.04-amd64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    28558da23525f76914895bf4497995e6.bin

  • Size

    57KB

  • Sample

    240430-bgn8fsgb5z

  • MD5

    85ab1153c291a551047595b22ca46165

  • SHA1

    c807b0e74cb428f084e9e5dcf25bae719d61a70c

  • SHA256

    517d941edaee136be2f206edb91709d4abbe6075b3b906a2721546f4d791700a

  • SHA512

    f5fbb110193e4cf1ff2a43b7adcf386eeb13806aa374cfcf60e5250d5c65488231b0eb9dc09a20afd2a7f5928b9143673ebe16ed51af462c872e4a39fbe691a8

  • SSDEEP

    1536:sRMuLXoWMIoZOxcyuXKDo4/IxN4ChHgylj8QIk3Ha:sR3kiISgxCChHtjFII6

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

185.196.8.31:3221

Targets

    • Target

      66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2.elf

    • Size

      139KB

    • MD5

      28558da23525f76914895bf4497995e6

    • SHA1

      ecb9cd23123716fc0c903930b57c77744a2aced5

    • SHA256

      66b79fcfb763dc11d03de8a1da3e50f9871be1d1e64e805c7dc14e987e4150f2

    • SHA512

      d1bc353306b4e4e6bec2c35abe105fca558a17ffba3cd34a3dc4227ccb3899a5cbbb2227903f86a1e448cd2a8fe275e22137ef633cbd05a719a58af290dba0fa

    • SSDEEP

      3072:yclx0/BSuUiFZPSwwSOyMzm5h6NJeX0mJswdytNr9:y3zbPGzm5hU7mJswdytNr9

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks