Overview

overview

10

Static

static

10

x-3.2-.ISIS.elf

ubuntu-18.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x-3.2-.ISIS.elf

  • Size

    84KB

  • Sample

    241113-pabwfasann

  • MD5

    06fab2d0f3e3b32090d1284e39d37259

  • SHA1

    8c656deb42674b19e4ee9b663100f296ece29b79

  • SHA256

    d11943f39ae7660270eb1f3ea1b2dcca988d5ea0604d141e1a4e59e8a806b881

  • SHA512

    df0631e001ca436de7e069fdaa17004e2a9bc20540e4067cb52699fada7a2514fb0925722d7f3feef2f9181ffe35c90faf641d07b3e9e9506d652a5fe21884af

  • SSDEEP

    1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwcUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5d9

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      x-3.2-.ISIS.elf

    • Size

      84KB

    • MD5

      06fab2d0f3e3b32090d1284e39d37259

    • SHA1

      8c656deb42674b19e4ee9b663100f296ece29b79

    • SHA256

      d11943f39ae7660270eb1f3ea1b2dcca988d5ea0604d141e1a4e59e8a806b881

    • SHA512

      df0631e001ca436de7e069fdaa17004e2a9bc20540e4067cb52699fada7a2514fb0925722d7f3feef2f9181ffe35c90faf641d07b3e9e9506d652a5fe21884af

    • SSDEEP

      1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwcUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5d9

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks