General

  • Target

    6a80f1ea14cf485a82fda55ee5a0195d99c6231f347d3aacb768377c74aff307.elf

  • Size

    170KB

  • Sample

    241112-mtt51s1cln

  • MD5

    a2d9767a5c6e98a274d7e555d7e67199

  • SHA1

    4364a2a706db5f716a22459d9416f16a3a2889c6

  • SHA256

    6a80f1ea14cf485a82fda55ee5a0195d99c6231f347d3aacb768377c74aff307

  • SHA512

    ee406ecd6eb9d6ef8b67b33c94808456d4dabec4ecb6bedb3dffd8fcd1599a15996f0c4e54796fc1ac1b64c3cd8ce6f39cb0f97bbf4cdab3d31557a7b832774b

  • SSDEEP

    3072:SbCHuE0z+60VZNcUetJ8add9QzhsZvJBOOPfq0Xdfi+KqLwZi+LUk:aCObPeaUetJ8addQYvJLdfi+KqLwU+Lf

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.201:23

Targets

    • Target

      6a80f1ea14cf485a82fda55ee5a0195d99c6231f347d3aacb768377c74aff307.elf

    • Size

      170KB

    • MD5

      a2d9767a5c6e98a274d7e555d7e67199

    • SHA1

      4364a2a706db5f716a22459d9416f16a3a2889c6

    • SHA256

      6a80f1ea14cf485a82fda55ee5a0195d99c6231f347d3aacb768377c74aff307

    • SHA512

      ee406ecd6eb9d6ef8b67b33c94808456d4dabec4ecb6bedb3dffd8fcd1599a15996f0c4e54796fc1ac1b64c3cd8ce6f39cb0f97bbf4cdab3d31557a7b832774b

    • SSDEEP

      3072:SbCHuE0z+60VZNcUetJ8add9QzhsZvJBOOPfq0Xdfi+KqLwZi+LUk:aCObPeaUetJ8addQYvJLdfi+KqLwU+Lf

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks