General

  • Target

    m-p.s-l.Logicnet.elf

  • Size

    123KB

  • Sample

    241122-wzbejawjb1

  • MD5

    d79befc0aca223ee5a2aaa65d32c6243

  • SHA1

    b73516536528d271a5522f706edc8305c8b51cb1

  • SHA256

    c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0

  • SHA512

    7ccbd16a420c6cc033c32d435c301286a238daf9c6ac91c050e952198809bb25b7945acbf8f4d0dbd738f08f4fbda1020ffcda57faaa268b7178a46305c191a1

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epc+DGGJrmW+IFB1Df11hR/:/UyLqAmgMJM8EW+DGsrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      m-p.s-l.Logicnet.elf

    • Size

      123KB

    • MD5

      d79befc0aca223ee5a2aaa65d32c6243

    • SHA1

      b73516536528d271a5522f706edc8305c8b51cb1

    • SHA256

      c30958ba3b70e3e12fb2b7a16dbc096137b6662e9da31fd0573500786a65b3a0

    • SHA512

      7ccbd16a420c6cc033c32d435c301286a238daf9c6ac91c050e952198809bb25b7945acbf8f4d0dbd738f08f4fbda1020ffcda57faaa268b7178a46305c191a1

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epc+DGGJrmW+IFB1Df11hR/:/UyLqAmgMJM8EW+DGsrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks