General

  • Target

    a-r.m-5.Logicnet.elf

  • Size

    98KB

  • Sample

    241122-w4b7mawkbw

  • MD5

    eef7d6a2539372a8d18f30b97ef3b3be

  • SHA1

    a3f4fd66d4618f47ced42e8fc1a26a3fada10cce

  • SHA256

    88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254

  • SHA512

    a7742ebb2e06ce1d83b9d61970740c446ab921f835f16cc52765fe7c0ffdecd141e9db5a352aed153e16aabb016ea559367ccb3075f83a5f2cec4902d194864c

  • SSDEEP

    3072:VSx+i6mqaObhNUnPLGd22mZuqQ4DPwXXtse:y6mRObnUnPp2mZuqQ4DPwXXtse

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      a-r.m-5.Logicnet.elf

    • Size

      98KB

    • MD5

      eef7d6a2539372a8d18f30b97ef3b3be

    • SHA1

      a3f4fd66d4618f47ced42e8fc1a26a3fada10cce

    • SHA256

      88c459917f3bb33ae58116bb24567e046c733882d9fede66c8374cad122e4254

    • SHA512

      a7742ebb2e06ce1d83b9d61970740c446ab921f835f16cc52765fe7c0ffdecd141e9db5a352aed153e16aabb016ea559367ccb3075f83a5f2cec4902d194864c

    • SSDEEP

      3072:VSx+i6mqaObhNUnPLGd22mZuqQ4DPwXXtse:y6mRObnUnPp2mZuqQ4DPwXXtse

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks