General

  • Target

    8af3d8726dea0d49c5666c9cfbcb21c11cc2c641fe6a2c6b1e01a89204be6c99.elf

  • Size

    156KB

  • Sample

    241012-b1m5havhmh

  • MD5

    41679c73d13260d67ce5cc88231a50b6

  • SHA1

    754b45482107a85f64e9bfb7cf8d031e707db3b5

  • SHA256

    8af3d8726dea0d49c5666c9cfbcb21c11cc2c641fe6a2c6b1e01a89204be6c99

  • SHA512

    17478f47aed43865198a03acd87b925045cae69ad5db26d80a21284604bcdfd1f7fc8af9272a07e631c4401fb4a1485a5064c4ed15d3701af6f808d0b4069c52

  • SSDEEP

    3072:pzarywUUUDX7ClNlDuedephahpSRtqUuZoscoKoUmBT38dAY4:JXqephabeLb5mBT38dAY4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

160.22.160.59:4444

Targets

    • Target

      8af3d8726dea0d49c5666c9cfbcb21c11cc2c641fe6a2c6b1e01a89204be6c99.elf

    • Size

      156KB

    • MD5

      41679c73d13260d67ce5cc88231a50b6

    • SHA1

      754b45482107a85f64e9bfb7cf8d031e707db3b5

    • SHA256

      8af3d8726dea0d49c5666c9cfbcb21c11cc2c641fe6a2c6b1e01a89204be6c99

    • SHA512

      17478f47aed43865198a03acd87b925045cae69ad5db26d80a21284604bcdfd1f7fc8af9272a07e631c4401fb4a1485a5064c4ed15d3701af6f808d0b4069c52

    • SSDEEP

      3072:pzarywUUUDX7ClNlDuedephahpSRtqUuZoscoKoUmBT38dAY4:JXqephabeLb5mBT38dAY4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks