General

  • Target

    tyo2831qq.x86.elf

  • Size

    156KB

  • Sample

    241110-t2hkhszmfy

  • MD5

    a8a6992775589faecef1bc8cf38bdfc5

  • SHA1

    b6903301aecf34539654f309b8c12773461920dc

  • SHA256

    cae053bfac71081a19bd64ae66f3fc9a149bcbe492eeb46d33647e01ab18eb52

  • SHA512

    dd803894a1bb9caa2bb4d1da70d35a531a7f76718d23392ff7ee511f489f413f2c79e82a3d7432685a36f470b69c74d211d18d050bee1a5d261c75131ee58fb8

  • SSDEEP

    3072:hoorS3/kjk3GWOwnzuXr+wMxphaMpFncunTieFIMK0UpW2mBT38dAY4:hqnrVxphaM2SFcRmBT38dAY4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.80.237:706

Targets

    • Target

      tyo2831qq.x86.elf

    • Size

      156KB

    • MD5

      a8a6992775589faecef1bc8cf38bdfc5

    • SHA1

      b6903301aecf34539654f309b8c12773461920dc

    • SHA256

      cae053bfac71081a19bd64ae66f3fc9a149bcbe492eeb46d33647e01ab18eb52

    • SHA512

      dd803894a1bb9caa2bb4d1da70d35a531a7f76718d23392ff7ee511f489f413f2c79e82a3d7432685a36f470b69c74d211d18d050bee1a5d261c75131ee58fb8

    • SSDEEP

      3072:hoorS3/kjk3GWOwnzuXr+wMxphaMpFncunTieFIMK0UpW2mBT38dAY4:hqnrVxphaM2SFcRmBT38dAY4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks