General

  • Target

    721ed0b47f6c546806173a0abab1e867ad2a953201da1d1a1d9cd19c0bfcba0f.elf

  • Size

    147KB

  • Sample

    241112-cyssmssgle

  • MD5

    72aea001ce758bae3b7adc93a557bc5d

  • SHA1

    6e92747f4ec45aec5650d34ed7b1d4899a21be1a

  • SHA256

    721ed0b47f6c546806173a0abab1e867ad2a953201da1d1a1d9cd19c0bfcba0f

  • SHA512

    49e95cf8d77a6905ea3989a829b1b6a556d40d0f83b6a40e7cf5fb184fcafc1c13c763736d8ffcb750657f87979389a84f88daa7fd37f48078145dc161cb89e9

  • SSDEEP

    3072:ZhRHih54YD17Mw2v6RhYGCkH/353etJ8add9QzhsS23S6KVIxndXL4CQSU5WvQds:hYhYG/f353etJ8addQPWS63dXL4CQSU+

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.201:23

Targets

    • Target

      721ed0b47f6c546806173a0abab1e867ad2a953201da1d1a1d9cd19c0bfcba0f.elf

    • Size

      147KB

    • MD5

      72aea001ce758bae3b7adc93a557bc5d

    • SHA1

      6e92747f4ec45aec5650d34ed7b1d4899a21be1a

    • SHA256

      721ed0b47f6c546806173a0abab1e867ad2a953201da1d1a1d9cd19c0bfcba0f

    • SHA512

      49e95cf8d77a6905ea3989a829b1b6a556d40d0f83b6a40e7cf5fb184fcafc1c13c763736d8ffcb750657f87979389a84f88daa7fd37f48078145dc161cb89e9

    • SSDEEP

      3072:ZhRHih54YD17Mw2v6RhYGCkH/353etJ8add9QzhsS23S6KVIxndXL4CQSU5WvQds:hYhYG/f353etJ8addQPWS63dXL4CQSU+

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks