General

  • Target

    5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf

  • Size

    123KB

  • Sample

    241112-mflays1ajl

  • MD5

    98628a7b2a7f7ebf96586566030319ac

  • SHA1

    d0a5c22f82dc5325ed1a0e91966eb3d2d3ccc815

  • SHA256

    5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5

  • SHA512

    fccd3a63bc7d2467928aff8534481084f802d49cda573710d45bee6115d5cb5586a5394811d18607b3b65aa0cb1c4d768d80713396914dc343ebea23cd5cedc8

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe6EdWfRZrmW+IFj:Ted0W0MZQHod6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

94.154.172.145:3074

Targets

    • Target

      5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5.elf

    • Size

      123KB

    • MD5

      98628a7b2a7f7ebf96586566030319ac

    • SHA1

      d0a5c22f82dc5325ed1a0e91966eb3d2d3ccc815

    • SHA256

      5b556a857c75be36e532de4afb4012d9a12631434f1c0c2c9800b64af10526f5

    • SHA512

      fccd3a63bc7d2467928aff8534481084f802d49cda573710d45bee6115d5cb5586a5394811d18607b3b65aa0cb1c4d768d80713396914dc343ebea23cd5cedc8

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe6EdWfRZrmW+IFj:Ted0W0MZQHod6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks