General

  • Target

    m-i.p-s.Logicnet.elf

  • Size

    123KB

  • Sample

    241122-wza4rswjbz

  • MD5

    c85913cd0c167fb9db8377e4b02c3bc3

  • SHA1

    baf34e1cbb34b2c645dddb8a559cef37a178482b

  • SHA256

    1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99

  • SHA512

    44af59467e510469a41aa6ab32456aae13dd955bd18f2ba791b46f891ad1122351607cbff05df1ffba7d087ca1c2df649c7f579f27fa67b50b6a672cc04d2565

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeLEd5jFeagrmW+i:Ted0W0MZQHbd5BeagrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      m-i.p-s.Logicnet.elf

    • Size

      123KB

    • MD5

      c85913cd0c167fb9db8377e4b02c3bc3

    • SHA1

      baf34e1cbb34b2c645dddb8a559cef37a178482b

    • SHA256

      1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99

    • SHA512

      44af59467e510469a41aa6ab32456aae13dd955bd18f2ba791b46f891ad1122351607cbff05df1ffba7d087ca1c2df649c7f579f27fa67b50b6a672cc04d2565

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeLEd5jFeagrmW+i:Ted0W0MZQHbd5BeagrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks