General

  • Target

    ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7.elf

  • Size

    102KB

  • Sample

    241114-ds9pmstfnf

  • MD5

    b1d59af683e49796a504f9e62ca2c646

  • SHA1

    88b4d6ad80a11f23b3f65a706b73332a2dfe16fc

  • SHA256

    ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7

  • SHA512

    2a67c8539d19338b0c9acf05392294eff59ec31e0fcd30531135ec0cd318f0a93e1f3817cf8017102ccfcf65e228d1d09e15c988593049eb29b592bb8de7cecb

  • SSDEEP

    3072:Plf1jKRi/VYf84Yfk7XTRUmpEqQ45vVXY0X:vjdVC7Yfk7qmpEqQ45vVXY0X

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.78.76.132:839

Targets

    • Target

      ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7.elf

    • Size

      102KB

    • MD5

      b1d59af683e49796a504f9e62ca2c646

    • SHA1

      88b4d6ad80a11f23b3f65a706b73332a2dfe16fc

    • SHA256

      ee639d76a27332dba16bf94fedc83f42a79f2b69d77054c5e1a95bb8a98a62e7

    • SHA512

      2a67c8539d19338b0c9acf05392294eff59ec31e0fcd30531135ec0cd318f0a93e1f3817cf8017102ccfcf65e228d1d09e15c988593049eb29b592bb8de7cecb

    • SSDEEP

      3072:Plf1jKRi/VYf84Yfk7XTRUmpEqQ45vVXY0X:vjdVC7Yfk7qmpEqQ45vVXY0X

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks