General

  • Target

    x-3.2-.Sakura.elf

  • Size

    83KB

  • Sample

    241111-ptgk2aylcv

  • MD5

    169b1c6ca9c32d4e7130fb10fb871b5b

  • SHA1

    51f9105943ab1ece5883eb12d6b1913062c23456

  • SHA256

    43e71e2aa9fea78432e3323811e9357db5d62750f0961ae0274816901ceec1b9

  • SHA512

    fe83ed642631563601ff562102c333b8f56bd7b640b48c168241f6b3601ef2edfab095e5f82acd6f37b89f0b7e52f414c3a039b565dad85aad21892b179ed55c

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8LkWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YI2oRmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.154.172.145:3074

Targets

    • Target

      x-3.2-.Sakura.elf

    • Size

      83KB

    • MD5

      169b1c6ca9c32d4e7130fb10fb871b5b

    • SHA1

      51f9105943ab1ece5883eb12d6b1913062c23456

    • SHA256

      43e71e2aa9fea78432e3323811e9357db5d62750f0961ae0274816901ceec1b9

    • SHA512

      fe83ed642631563601ff562102c333b8f56bd7b640b48c168241f6b3601ef2edfab095e5f82acd6f37b89f0b7e52f414c3a039b565dad85aad21892b179ed55c

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8LkWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0YI2oRmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks