General

  • Target

    824bd7b116e2d5b8d2b7d11bd32756964313196f55fed442d0bc8ea3f54f704d.elf

  • Size

    243KB

  • Sample

    241102-g5c3zs1pdn

  • MD5

    d78a2539eb007bd56f0bc1a363ddced0

  • SHA1

    1275f7ce882376c70d82e69780b59505eeb47535

  • SHA256

    824bd7b116e2d5b8d2b7d11bd32756964313196f55fed442d0bc8ea3f54f704d

  • SHA512

    8a8cd0d4464e19218f30f4b97c0bba2d04cad1720d506621247c1f2570678a99f847c32b4ff2035f8a5a39d506912b4bec5041e40a01bb9f9cf2548eeed6fe8d

  • SSDEEP

    6144:od+zaQj8aycw6r8le/Fxgd9Cxq53Ep7V7Yvl3mojKMl2k:od88aycw6YlW7d+opEd3mojKMl2k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.80.237:999

Targets

    • Target

      824bd7b116e2d5b8d2b7d11bd32756964313196f55fed442d0bc8ea3f54f704d.elf

    • Size

      243KB

    • MD5

      d78a2539eb007bd56f0bc1a363ddced0

    • SHA1

      1275f7ce882376c70d82e69780b59505eeb47535

    • SHA256

      824bd7b116e2d5b8d2b7d11bd32756964313196f55fed442d0bc8ea3f54f704d

    • SHA512

      8a8cd0d4464e19218f30f4b97c0bba2d04cad1720d506621247c1f2570678a99f847c32b4ff2035f8a5a39d506912b4bec5041e40a01bb9f9cf2548eeed6fe8d

    • SSDEEP

      6144:od+zaQj8aycw6r8le/Fxgd9Cxq53Ep7V7Yvl3mojKMl2k:od88aycw6YlW7d+opEd3mojKMl2k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks