General

  • Target

    c72ddb9be20cf366802c48a4ddf5bf4f66cc8aaaf62c92e9c16112caecfeb47a.elf

  • Size

    71KB

  • Sample

    241106-d89pkstgjf

  • MD5

    419d3ff85750d91822c66a07b4fc2601

  • SHA1

    a92b23e4c6a0106b8b81fa87e992ac6b4c3596d3

  • SHA256

    c72ddb9be20cf366802c48a4ddf5bf4f66cc8aaaf62c92e9c16112caecfeb47a

  • SHA512

    eeb52b34a975e7206e9f5cfda21bbdfa2f91bb2a61acb641ee94dc2f993c131f7345c6d97db15dbbbd73f531ec829031f98025af21dd9053c7423e5adeffb904

  • SSDEEP

    1536:yqSbvCM7SKkGzJj+cCJOWA86rzmNjoQZORXvE/mF+LVOZs9uclMZ:qbvF+KkGVj+X3TWCho4Q/wmELVOZ2ucU

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

109.120.137.10:666

Targets

    • Target

      c72ddb9be20cf366802c48a4ddf5bf4f66cc8aaaf62c92e9c16112caecfeb47a.elf

    • Size

      71KB

    • MD5

      419d3ff85750d91822c66a07b4fc2601

    • SHA1

      a92b23e4c6a0106b8b81fa87e992ac6b4c3596d3

    • SHA256

      c72ddb9be20cf366802c48a4ddf5bf4f66cc8aaaf62c92e9c16112caecfeb47a

    • SHA512

      eeb52b34a975e7206e9f5cfda21bbdfa2f91bb2a61acb641ee94dc2f993c131f7345c6d97db15dbbbd73f531ec829031f98025af21dd9053c7423e5adeffb904

    • SSDEEP

      1536:yqSbvCM7SKkGzJj+cCJOWA86rzmNjoQZORXvE/mF+LVOZs9uclMZ:qbvF+KkGVj+X3TWCho4Q/wmELVOZ2ucU

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks