General

  • Target

    x-8.6-.Logicnet.elf

  • Size

    92KB

  • Sample

    241122-wzweps1phl

  • MD5

    35999e211f37f044baef609e8de052b0

  • SHA1

    87be1a7f5b662a6d4a2499a46fedb12ea6ebde09

  • SHA256

    40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c

  • SHA512

    655714c5d2127257968bb131f50231df70471d94ed9afa8016b268cfabc6b17bec2ed99f5e4a7734f8597f5e3dc77baf809ff26629e6caa4d492b97a6e6df57d

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3gMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKwMvm/KWOXF7Y

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      x-8.6-.Logicnet.elf

    • Size

      92KB

    • MD5

      35999e211f37f044baef609e8de052b0

    • SHA1

      87be1a7f5b662a6d4a2499a46fedb12ea6ebde09

    • SHA256

      40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c

    • SHA512

      655714c5d2127257968bb131f50231df70471d94ed9afa8016b268cfabc6b17bec2ed99f5e4a7734f8597f5e3dc77baf809ff26629e6caa4d492b97a6e6df57d

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3gMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKwMvm/KWOXF7Y

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks