General

  • Target

    3de260e845bcc68f9da883bbfbd8db75e04ec397f6ebc7de6a646b6e3e50b1e4.elf

  • Size

    205KB

  • Sample

    241110-crb7bawqgy

  • MD5

    829d7b2d7a6ddcfaf183d476d19eb050

  • SHA1

    5ad3dc0b889b25180eeda42425d21fc5db1d9756

  • SHA256

    3de260e845bcc68f9da883bbfbd8db75e04ec397f6ebc7de6a646b6e3e50b1e4

  • SHA512

    5c4b09d962ef9fb350bbd758f3726166f9e1dcc82659cac4cca3461ad9c024f6b3e6fec37fc5e354ffe99b86eaf41f7334472430113220da0ac6995fcbdb7b51

  • SSDEEP

    6144:Fyoka9SMmxwi3IYvH5hPsu6i2ixVC6qm0wfB5RyAn:Fyoka9SMmxwzo5hP26hqm0mB5RyAn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.80.237:706

Targets

    • Target

      3de260e845bcc68f9da883bbfbd8db75e04ec397f6ebc7de6a646b6e3e50b1e4.elf

    • Size

      205KB

    • MD5

      829d7b2d7a6ddcfaf183d476d19eb050

    • SHA1

      5ad3dc0b889b25180eeda42425d21fc5db1d9756

    • SHA256

      3de260e845bcc68f9da883bbfbd8db75e04ec397f6ebc7de6a646b6e3e50b1e4

    • SHA512

      5c4b09d962ef9fb350bbd758f3726166f9e1dcc82659cac4cca3461ad9c024f6b3e6fec37fc5e354ffe99b86eaf41f7334472430113220da0ac6995fcbdb7b51

    • SSDEEP

      6144:Fyoka9SMmxwi3IYvH5hPsu6i2ixVC6qm0wfB5RyAn:Fyoka9SMmxwzo5hP26hqm0mB5RyAn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks