General

  • Target

    85c5941ea39fabd5c7fbd6a3495b07c4e6e73bf776484987d2fd51713370f80e.elf

  • Size

    176KB

  • Sample

    241111-c51f3atqhk

  • MD5

    f796c1074d8c5affec538907a7f5437a

  • SHA1

    8bf499432a111d37a7e0d260c1e40cfe2240cec5

  • SHA256

    85c5941ea39fabd5c7fbd6a3495b07c4e6e73bf776484987d2fd51713370f80e

  • SHA512

    a91deb11c81e0ea901d32c4bdf26642d8bad35fd5f5f57ccbfde9b31762b547069a229f9f662d1e43b5583bb5b1e1028f8896160aef93c8da770f9aef92f37cc

  • SSDEEP

    3072:nORcfTNDHM2pFZfauqJGe24m62sGJyhcEXE2hgupLsTAzloRtSLxnHlhKQsKdJa5:Ou9dudJR+35UNsam0nKXcSH

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.54.46:23

Targets

    • Target

      85c5941ea39fabd5c7fbd6a3495b07c4e6e73bf776484987d2fd51713370f80e.elf

    • Size

      176KB

    • MD5

      f796c1074d8c5affec538907a7f5437a

    • SHA1

      8bf499432a111d37a7e0d260c1e40cfe2240cec5

    • SHA256

      85c5941ea39fabd5c7fbd6a3495b07c4e6e73bf776484987d2fd51713370f80e

    • SHA512

      a91deb11c81e0ea901d32c4bdf26642d8bad35fd5f5f57ccbfde9b31762b547069a229f9f662d1e43b5583bb5b1e1028f8896160aef93c8da770f9aef92f37cc

    • SSDEEP

      3072:nORcfTNDHM2pFZfauqJGe24m62sGJyhcEXE2hgupLsTAzloRtSLxnHlhKQsKdJa5:Ou9dudJR+35UNsam0nKXcSH

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks