General

  • Target

    a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf

  • Size

    106KB

  • Sample

    240521-rldkhsgg68

  • MD5

    d5910fb55bb9cb006b93575357a78c6b

  • SHA1

    ec8cf9196e90ddad4bde15755884c830b24a9fa7

  • SHA256

    a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af

  • SHA512

    9d315a62291da50ae46e306c99e1f1723c9e5258330d8bf7ad3cbf11669de303e18ab367fc712b462cb64a41f83d417bf56ed203bc4632318eb6c169d17d025b

  • SSDEEP

    3072:oEUVxoss3+8CMpha/+6WBhSXcCyKcm4RWaLHgb4:vubMpha/rXty1m4RWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

91.92.252.211:444

Targets

    • Target

      a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af.elf

    • Size

      106KB

    • MD5

      d5910fb55bb9cb006b93575357a78c6b

    • SHA1

      ec8cf9196e90ddad4bde15755884c830b24a9fa7

    • SHA256

      a00c1b99a0757859ad160c49bbb82ef0bf9f3b07685b1177daa3fb9607b2c8af

    • SHA512

      9d315a62291da50ae46e306c99e1f1723c9e5258330d8bf7ad3cbf11669de303e18ab367fc712b462cb64a41f83d417bf56ed203bc4632318eb6c169d17d025b

    • SSDEEP

      3072:oEUVxoss3+8CMpha/+6WBhSXcCyKcm4RWaLHgb4:vubMpha/rXty1m4RWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks