General

  • Target

    m-6.8-k.ISIS.elf

  • Size

    161KB

  • Sample

    241113-w1mtyswnbx

  • MD5

    aa5281a4f008652bd5488dcea862e933

  • SHA1

    5786bb24333eb832f81295abc2dab1486e412a40

  • SHA256

    57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541

  • SHA512

    4081a4b1772687141d4caa6340b85808b1f76b46cbc6e1c1d027dd0b5f480eb737bf33cbc3c5e941b71ba2ea3adae9861422f40789a1b35ac9cd73d19d9d9ce4

  • SSDEEP

    3072:Nd+3IoaOqhjsfDl02A6UCSMHnBQIM/9mVympwfFRQfVE:H+4oaOqhj2DzUCxHnBvM/9mVympwfFau

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      m-6.8-k.ISIS.elf

    • Size

      161KB

    • MD5

      aa5281a4f008652bd5488dcea862e933

    • SHA1

      5786bb24333eb832f81295abc2dab1486e412a40

    • SHA256

      57166146af2e8e463cb70ff74b787473600941427569db083a96655728063541

    • SHA512

      4081a4b1772687141d4caa6340b85808b1f76b46cbc6e1c1d027dd0b5f480eb737bf33cbc3c5e941b71ba2ea3adae9861422f40789a1b35ac9cd73d19d9d9ce4

    • SSDEEP

      3072:Nd+3IoaOqhjsfDl02A6UCSMHnBQIM/9mVympwfFRQfVE:H+4oaOqhj2DzUCxHnBvM/9mVympwfFau

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks