Overview

overview

10

Static

static

10

7915a43031...72.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7915a4303140e7cae743a88b47551bd7f5ce228c3ebd11d1253af7a81e5f8e72.elf

  • Size

    115KB

  • Sample

    240522-b9qxrage64

  • MD5

    7e723da85f39e73445e84a18e4619d93

  • SHA1

    b23ea642ddf41da2086dae61d6231d52741439f9

  • SHA256

    7915a4303140e7cae743a88b47551bd7f5ce228c3ebd11d1253af7a81e5f8e72

  • SHA512

    b4df3ce95dee9492923474103f0cd7b16aacd14294563deb324cd223946e4da80575932ec691143bf0f73c7e0aa5b9184f27d9fc81b1eef5d2e2d7d3b9b5503e

  • SSDEEP

    3072:xutsuSX8eZ3y97Uj0LUsUYUCvw/+tXgbWUoF5hqT21Pk4FmlwUnZ9tFVi:7uSX8ehy97Uj0LPZjvw/+hO5oF5hl1PH

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

176.32.38.160:42021

Targets

    • Target

      7915a4303140e7cae743a88b47551bd7f5ce228c3ebd11d1253af7a81e5f8e72.elf

    • Size

      115KB

    • MD5

      7e723da85f39e73445e84a18e4619d93

    • SHA1

      b23ea642ddf41da2086dae61d6231d52741439f9

    • SHA256

      7915a4303140e7cae743a88b47551bd7f5ce228c3ebd11d1253af7a81e5f8e72

    • SHA512

      b4df3ce95dee9492923474103f0cd7b16aacd14294563deb324cd223946e4da80575932ec691143bf0f73c7e0aa5b9184f27d9fc81b1eef5d2e2d7d3b9b5503e

    • SSDEEP

      3072:xutsuSX8eZ3y97Uj0LUsUYUCvw/+tXgbWUoF5hqT21Pk4FmlwUnZ9tFVi:7uSX8ehy97Uj0LPZjvw/+hO5oF5hl1PH

    Score
    7/10

    • Deletes itself

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks