General

  • Target

    a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c.elf

  • Size

    97KB

  • Sample

    241114-dewkvssqby

  • MD5

    e79e76631968be43cf361b72568fc041

  • SHA1

    2b7bd128bd1feeda94bb49697832c6a97725dcd0

  • SHA256

    a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c

  • SHA512

    26da0800dede2b10a49fb099c7dfa2bdcbe6731a6861ee6610506832e9500a56ca5b4e32cd64a9319251754d26ad7908552ebb87f004d27eeca6b2b0c6fb1aab

  • SSDEEP

    3072:2K5ejA4jB4h89HOPQzM9FqVy19W9vmrYuOHy+ZNzX:sHjBzuPQQvk9vmrYuOHy+ZNzX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c.elf

    • Size

      97KB

    • MD5

      e79e76631968be43cf361b72568fc041

    • SHA1

      2b7bd128bd1feeda94bb49697832c6a97725dcd0

    • SHA256

      a9a3bdcb992f93fe7edd2f8a0f9c90a7fa807ffb0190b06cab91b2674363d42c

    • SHA512

      26da0800dede2b10a49fb099c7dfa2bdcbe6731a6861ee6610506832e9500a56ca5b4e32cd64a9319251754d26ad7908552ebb87f004d27eeca6b2b0c6fb1aab

    • SSDEEP

      3072:2K5ejA4jB4h89HOPQzM9FqVy19W9vmrYuOHy+ZNzX:sHjBzuPQQvk9vmrYuOHy+ZNzX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks