General

  • Target

    d6cea53172ee89d84858a2d30ed3cb0f00b6be251b990be10732d01659048d5d.elf

  • Size

    176KB

  • Sample

    241018-dchafswaqq

  • MD5

    a12f73595ac151704a731bbca8ff2180

  • SHA1

    6070bdd09ff0ae162104d9f43fd0eed53dbcef20

  • SHA256

    d6cea53172ee89d84858a2d30ed3cb0f00b6be251b990be10732d01659048d5d

  • SHA512

    12563cfd996548036d1c7ca36dff67377167e668d469dd29dd1cbf2b84a324fcc68a78201b9ee260765ba84bd33dd5e608713323e75e1cc9a9bf2f3206224560

  • SSDEEP

    1536:O4ejx3x6/r5/FQF56rRR6/rYcmw+tp07LQiU65eip4dimmeBy/mdanKs6cSH:Oz1/cZw+t+v8iWiEy/m0nKs6cSH

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

205.185.122.67:23

Targets

    • Target

      d6cea53172ee89d84858a2d30ed3cb0f00b6be251b990be10732d01659048d5d.elf

    • Size

      176KB

    • MD5

      a12f73595ac151704a731bbca8ff2180

    • SHA1

      6070bdd09ff0ae162104d9f43fd0eed53dbcef20

    • SHA256

      d6cea53172ee89d84858a2d30ed3cb0f00b6be251b990be10732d01659048d5d

    • SHA512

      12563cfd996548036d1c7ca36dff67377167e668d469dd29dd1cbf2b84a324fcc68a78201b9ee260765ba84bd33dd5e608713323e75e1cc9a9bf2f3206224560

    • SSDEEP

      1536:O4ejx3x6/r5/FQF56rRR6/rYcmw+tp07LQiU65eip4dimmeBy/mdanKs6cSH:Oz1/cZw+t+v8iWiEy/m0nKs6cSH

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks