General

  • Target

    x-3.2-.ISIS.elf

  • Size

    84KB

  • Sample

    241113-wtjhysxbqj

  • MD5

    b5955adc8c122a81dcacb4a2e0f84f53

  • SHA1

    834b86d5bf259c5d440a76de38e5ec8b7632527a

  • SHA256

    24c941fb90bc3888d3fae29a707d27fe5961bca572ab6e337bbf4ca8fc2b3552

  • SHA512

    75f936c70c0f88a3b7220607f8ab89f2066a87cb644ea1ec82d1cf0e970b163ca2c372663b2cadc1261ccd8e2d1db055b1823863229edd6c6a16c4f75cea4e71

  • SSDEEP

    1536:sQmab6bXPm8VjWWHT0im5tu0uTShKW6GLdUF5MI5AtpgwcP6GHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5thucnBUF5MI5d2

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      x-3.2-.ISIS.elf

    • Size

      84KB

    • MD5

      b5955adc8c122a81dcacb4a2e0f84f53

    • SHA1

      834b86d5bf259c5d440a76de38e5ec8b7632527a

    • SHA256

      24c941fb90bc3888d3fae29a707d27fe5961bca572ab6e337bbf4ca8fc2b3552

    • SHA512

      75f936c70c0f88a3b7220607f8ab89f2066a87cb644ea1ec82d1cf0e970b163ca2c372663b2cadc1261ccd8e2d1db055b1823863229edd6c6a16c4f75cea4e71

    • SSDEEP

      1536:sQmab6bXPm8VjWWHT0im5tu0uTShKW6GLdUF5MI5AtpgwcP6GHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5thucnBUF5MI5d2

    Score
    7/10
    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Matrix

Tasks