Overview

overview

10

Static

static

10

m-i.p-s.ISIS.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    m-i.p-s.ISIS.elf

  • Size

    131KB

  • Sample

    241113-wxd3msznhq

  • MD5

    80a4b7f8106e53e2eb88722c9ddf428e

  • SHA1

    f84716ca9339f128c18ec4aef13ae59012c94a81

  • SHA256

    2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f

  • SHA512

    2bbcd100366bde5991e3e63a43f557b665d9eec7a00cacd6fb12b20605f1c78de69fa594180e79fd237068d5c3fb97ce1ecf9afb7e5aa50fd9de11f6f6ca1b4b

  • SSDEEP

    3072:jGTyrDxJWwAfr9f3yJdJxDEhmLDOj2rOcBu/NBFYR15dRJevCZi3hKiDhB/ZZ9BF:CvnZSZJnJeUmkASFxBKvXZX

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      m-i.p-s.ISIS.elf

    • Size

      131KB

    • MD5

      80a4b7f8106e53e2eb88722c9ddf428e

    • SHA1

      f84716ca9339f128c18ec4aef13ae59012c94a81

    • SHA256

      2164fe06b8fbc8d57b2f35c546d10bec5bbc29a3f4712453947d33277329147f

    • SHA512

      2bbcd100366bde5991e3e63a43f557b665d9eec7a00cacd6fb12b20605f1c78de69fa594180e79fd237068d5c3fb97ce1ecf9afb7e5aa50fd9de11f6f6ca1b4b

    • SSDEEP

      3072:jGTyrDxJWwAfr9f3yJdJxDEhmLDOj2rOcBu/NBFYR15dRJevCZi3hKiDhB/ZZ9BF:CvnZSZJnJeUmkASFxBKvXZX

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks