Overview

overview

10

Static

static

10

1be75e4239...99.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c85913cd0c167fb9db8377e4b02c3bc3.bin

  • Size

    42KB

  • Sample

    241124-b6t51atnem

  • MD5

    08a849d520a2a06e7f67f43ab624347e

  • SHA1

    1149ccf6ca88956f6f14abbf009cf09172ce14a5

  • SHA256

    7ccbe12f7d2bacce41fffc4792d1f411138e7c6503fc09078387793912d63d8c

  • SHA512

    658bc593df989ee36eb510ec3345fb8ce542abe3533ecb0b675f02be7ab9e199469bf6e88b191915ffb2166c469c28dc5cfd310845235b074c0bb6150be6f7bf

  • SSDEEP

    768:I0tUGmyyVzingxaqrAzVu7cTJZ2av+cqeFYa+iVk6GiDzUGsP:IUUGUVziwa1uoNPGcfM8k6dvUJP

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99.elf

    • Size

      123KB

    • MD5

      c85913cd0c167fb9db8377e4b02c3bc3

    • SHA1

      baf34e1cbb34b2c645dddb8a559cef37a178482b

    • SHA256

      1be75e423982f2ff813a1d41a075d6c1da2c9d97b0e58afa0913ebb68c792a99

    • SHA512

      44af59467e510469a41aa6ab32456aae13dd955bd18f2ba791b46f891ad1122351607cbff05df1ffba7d087ca1c2df649c7f579f27fa67b50b6a672cc04d2565

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBeLEd5jFeagrmW+i:Ted0W0MZQHbd5BeagrmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks