General

  • Target

    8ff2c2125d1cc590e405561a2c39a04fbac187a6dde6104ff7ca5dd696256d1b.elf

  • Size

    152KB

  • Sample

    241022-b3lpfszakc

  • MD5

    4203497a7734820ee286aa1038087dad

  • SHA1

    85711c8d6e3cb003f2c96f65cb7fc4081cac16f1

  • SHA256

    8ff2c2125d1cc590e405561a2c39a04fbac187a6dde6104ff7ca5dd696256d1b

  • SHA512

    4e1e36c6f355a0288c4cac84d511e7576dabe93ddc3cb9c52f845742597b08dec0cd96ed5e42d980d429034a31e6eb5a97706a91f78ea261ce2267c003cb090d

  • SSDEEP

    3072:Oh8pDxLxO0PXW8/2lMq9I5hBke+84FmzZQQAhtRq6AAe:lm8/2l9I5hBkeWFmzZQQAhtRq6AAe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

159.100.14.37:6060

Targets

    • Target

      8ff2c2125d1cc590e405561a2c39a04fbac187a6dde6104ff7ca5dd696256d1b.elf

    • Size

      152KB

    • MD5

      4203497a7734820ee286aa1038087dad

    • SHA1

      85711c8d6e3cb003f2c96f65cb7fc4081cac16f1

    • SHA256

      8ff2c2125d1cc590e405561a2c39a04fbac187a6dde6104ff7ca5dd696256d1b

    • SHA512

      4e1e36c6f355a0288c4cac84d511e7576dabe93ddc3cb9c52f845742597b08dec0cd96ed5e42d980d429034a31e6eb5a97706a91f78ea261ce2267c003cb090d

    • SSDEEP

      3072:Oh8pDxLxO0PXW8/2lMq9I5hBke+84FmzZQQAhtRq6AAe:lm8/2l9I5hBkeWFmzZQQAhtRq6AAe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks