General

  • Target

    b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324.elf

  • Size

    98KB

  • Sample

    241112-dbne3stblj

  • MD5

    6cf5af2d320ebe051084d3a832a34897

  • SHA1

    0f5681f6363b7cd9f605262ee495de8c6a98ec66

  • SHA256

    b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324

  • SHA512

    c074d737e4c771b1558d63da9ef3f09de2830072f556b335a679bc7bf52e25d74c7719f54b49d08cb2e6053b41a6aa565d2d21658a05f6a16392269628d082da

  • SSDEEP

    3072:VSx+i6mqaObhNTnPNKV+qKmZuqQ4DPwXXtse:y6mRObnTnP7qKmZuqQ4DPwXXtse

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.154.172.145:3074

Targets

    • Target

      b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324.elf

    • Size

      98KB

    • MD5

      6cf5af2d320ebe051084d3a832a34897

    • SHA1

      0f5681f6363b7cd9f605262ee495de8c6a98ec66

    • SHA256

      b3df6ef2185df65483d2f9ae7ef174eaa4e1cc8256420358db036547d300d324

    • SHA512

      c074d737e4c771b1558d63da9ef3f09de2830072f556b335a679bc7bf52e25d74c7719f54b49d08cb2e6053b41a6aa565d2d21658a05f6a16392269628d082da

    • SSDEEP

      3072:VSx+i6mqaObhNTnPNKV+qKmZuqQ4DPwXXtse:y6mRObnTnP7qKmZuqQ4DPwXXtse

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks