General

  • Target

    d8d7ed4100797c514a084373b1ebaf63cdd86b91ceba0d21a624e070086313f8.elf

  • Size

    123KB

  • Sample

    241110-dk3lcsxpby

  • MD5

    e3885c136de08d899b71e9c6a9fcc533

  • SHA1

    db957a8a4e1af382d051b28fbc8cd7cd5a6071c8

  • SHA256

    d8d7ed4100797c514a084373b1ebaf63cdd86b91ceba0d21a624e070086313f8

  • SHA512

    2090b66c31d49caf1e2dabc881e7e1862835d0e4074aa4209fc004fc224c46e58e405ecaf7e649e3e981ce8a5cbbbd4426cb7c12edae8809a30c473257743831

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeuEdWfRZrmW+IFj:Ted0W0MZQHAd6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.232:12345

Targets

    • Target

      d8d7ed4100797c514a084373b1ebaf63cdd86b91ceba0d21a624e070086313f8.elf

    • Size

      123KB

    • MD5

      e3885c136de08d899b71e9c6a9fcc533

    • SHA1

      db957a8a4e1af382d051b28fbc8cd7cd5a6071c8

    • SHA256

      d8d7ed4100797c514a084373b1ebaf63cdd86b91ceba0d21a624e070086313f8

    • SHA512

      2090b66c31d49caf1e2dabc881e7e1862835d0e4074aa4209fc004fc224c46e58e405ecaf7e649e3e981ce8a5cbbbd4426cb7c12edae8809a30c473257743831

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeuEdWfRZrmW+IFj:Ted0W0MZQHAd6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks