General

  • Target

    67d5c8bf0fcb5358cd89ebfeeb1a809da606332643fc16c404ffac112f6cd19d.elf

  • Size

    130KB

  • Sample

    240715-wscc9asgnk

  • MD5

    745c75ec16c3dba2b89f8a39d86e44af

  • SHA1

    473aa35d52369b8050296198b47a4298f0088b73

  • SHA256

    67d5c8bf0fcb5358cd89ebfeeb1a809da606332643fc16c404ffac112f6cd19d

  • SHA512

    3ba52d0e857ab0cb225108646b03cd33e025229e66f503c1a6299372e3a489110de98def77b5b687104571dcd867acdbfbee0f7c053b6c2ed7c6bc621c97c1e1

  • SSDEEP

    1536:/n/iF/a76+Ll6Ci2rKh6m42YQEOnEVu6DsQkvjR8/fDVp1Vm3lvSTYjXmWCnB65Q:CAuLLss0P1hqXmvnBUHubn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.44.2.165:23

Targets

    • Target

      67d5c8bf0fcb5358cd89ebfeeb1a809da606332643fc16c404ffac112f6cd19d.elf

    • Size

      130KB

    • MD5

      745c75ec16c3dba2b89f8a39d86e44af

    • SHA1

      473aa35d52369b8050296198b47a4298f0088b73

    • SHA256

      67d5c8bf0fcb5358cd89ebfeeb1a809da606332643fc16c404ffac112f6cd19d

    • SHA512

      3ba52d0e857ab0cb225108646b03cd33e025229e66f503c1a6299372e3a489110de98def77b5b687104571dcd867acdbfbee0f7c053b6c2ed7c6bc621c97c1e1

    • SSDEEP

      1536:/n/iF/a76+Ll6Ci2rKh6m42YQEOnEVu6DsQkvjR8/fDVp1Vm3lvSTYjXmWCnB65Q:CAuLLss0P1hqXmvnBUHubn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks