General

  • Target

    f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e.elf

  • Size

    106KB

  • Sample

    241123-drpcbaxkat

  • MD5

    9f7ac6ec336a793d48610b4503dbcf8b

  • SHA1

    51674bec76b65e63d3e3c71569c6d66df31b6df1

  • SHA256

    f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e

  • SHA512

    d29a0cfe2fb8f63ce64fab4348f05d7d1b0c631b0ff2e108868db3c6c7e8359d73b992d5b5652534c54223e120ad0d1203003511b1ca90dd30f32b24c2c6620f

  • SSDEEP

    3072:j6dye4BmJQ6phaZw/1vc4MAzkSXmdRWaLHgb4:d6phaZcvrmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.212.148.212:4258

Targets

    • Target

      f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e.elf

    • Size

      106KB

    • MD5

      9f7ac6ec336a793d48610b4503dbcf8b

    • SHA1

      51674bec76b65e63d3e3c71569c6d66df31b6df1

    • SHA256

      f720d27830f494caeee54dc178833970148584e03e42311e1a3a5187fca7829e

    • SHA512

      d29a0cfe2fb8f63ce64fab4348f05d7d1b0c631b0ff2e108868db3c6c7e8359d73b992d5b5652534c54223e120ad0d1203003511b1ca90dd30f32b24c2c6620f

    • SSDEEP

      3072:j6dye4BmJQ6phaZw/1vc4MAzkSXmdRWaLHgb4:d6phaZcvrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks