General

  • Target

    dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a.elf

  • Size

    150KB

  • Sample

    241118-yjn2ssynfq

  • MD5

    63931a17500f6e546e3bf71b14ddd381

  • SHA1

    f6b187b0d228cb7ce49e8e8e04170e2a14378e52

  • SHA256

    dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a

  • SHA512

    f73c62ac143a2c15412b11aad25588d2d03e5e37e547ef9649805d8acdf3348ffee2ad7dee1fcbacf3779ec0a538eb5df1b7070ded64b5aba40449c695bfd279

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAT5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT65hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.156.29.141:4258

Targets

    • Target

      dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a.elf

    • Size

      150KB

    • MD5

      63931a17500f6e546e3bf71b14ddd381

    • SHA1

      f6b187b0d228cb7ce49e8e8e04170e2a14378e52

    • SHA256

      dba49ff661329bd885a914df625ab3e7b5fb324f2a0468db07c646cdead9f41a

    • SHA512

      f73c62ac143a2c15412b11aad25588d2d03e5e37e547ef9649805d8acdf3348ffee2ad7dee1fcbacf3779ec0a538eb5df1b7070ded64b5aba40449c695bfd279

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAT5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT65hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks