Overview

overview

10

Static

static

10

40be8bf94e...8c.elf

ubuntu-24.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35999e211f37f044baef609e8de052b0.bin

  • Size

    41KB

  • Sample

    241124-bk7h7swnft

  • MD5

    7ed89e898a9c4940c85f1b7123a9e9e6

  • SHA1

    e2db3d13c94004bbfbe8339894f0fbca611f3f65

  • SHA256

    4170ff93b2c37cb14388fe410ebb40c5247e13887a5ad89b7b580ee886f98c2d

  • SHA512

    4d3d8f74fde2cb1571448d4f6549d69313cbf78af2d7a67ef09c68424823dd8ad86b2428d50d4693bb3f07e33beb494dd0f458c49fad14283bff666966034b39

  • SSDEEP

    768:xeiiMwK/t4A/EufAQGvrIO59gW8LPyqA8ZC4tHYx6rBD9nfxO9+:AJy/6A/EjDIO5T8mnoHeOFxOw

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

188.245.84.178:1865

Targets

    • Target

      40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c.elf

    • Size

      92KB

    • MD5

      35999e211f37f044baef609e8de052b0

    • SHA1

      87be1a7f5b662a6d4a2499a46fedb12ea6ebde09

    • SHA256

      40be8bf94e11a94e5a62f0387797526f442dc1439cb78973e3a9587a4b8f578c

    • SHA512

      655714c5d2127257968bb131f50231df70471d94ed9afa8016b268cfabc6b17bec2ed99f5e4a7734f8597f5e3dc77baf809ff26629e6caa4d492b97a6e6df57d

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3gMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKwMvm/KWOXF7Y

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks