General

  • Target

    1a4b79c705b2597ae41b0443957d6199.bin

  • Size

    44KB

  • Sample

    241124-bgflbaslbn

  • MD5

    d7b9aa360bde41feb9432cc99f4d8c35

  • SHA1

    6ea010c914667afbbdb89077755e4322f0d793bf

  • SHA256

    8cd8341b70daeb08e477a25f7e8c7a7206262982eb092a89d43df1e0649924d6

  • SHA512

    d12072728a6d03b421335f89399449b488853fc493638346af77b3090d9997dec449d8bca62658298d3a03051edc1872bc727ccdf8354d6f7380fe9e553bc276

  • SSDEEP

    768:FTXBZns/s0CoAzfg8JWhD/mmU+4t4zBAVt5XHsR6vK1VUAWx6YrI8h0iD:99josfgeIDpUZyzBsjXMiOWdIy

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      fd830c02492d532df51a67b2ee3a481bc0ff31a7f5809a044389b4db1f2c373c.elf

    • Size

      105KB

    • MD5

      1a4b79c705b2597ae41b0443957d6199

    • SHA1

      56e96574b23152274161311d15e03c526eb09ce2

    • SHA256

      fd830c02492d532df51a67b2ee3a481bc0ff31a7f5809a044389b4db1f2c373c

    • SHA512

      52f0ab8e2365fae38a3e277ea3063af69cff6c8d2f67f28c5b9c418bcc46d0ed360d74a838aa8eeeb72bea2dee1aaccf2312507c6e6befea79d6204ab6941f51

    • SSDEEP

      3072:MSY+46m1qOzsshFPueFhkPmkZrQAhPDCXFke:06mgOzJhFPJEmkZrQAhPDCXFke

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks