General

  • Target

    pXdN91.armv5l.elf

  • Size

    125KB

  • Sample

    241125-h13zaavnex

  • MD5

    d3368ac27728d9bd4016d0020ae7d541

  • SHA1

    82b5b7d665df7fdb52a72f643428189607b6cce0

  • SHA256

    17556533f2e2c0408b1096f4e932c87664258b56254c0f21cd26301b1a45d8c5

  • SHA512

    4320e5588216b40bac6c72e1c1e932f41c3320f46c28cb7d8ad3b5b0c917909c86c9ed2760e102a3351e8f1812cbd55f3356e85c242ae611f7c6b1c0ebff1636

  • SSDEEP

    3072:5siuapO7EPDLzg9QVf2vhyeoh78VmkQBWzXvb8:/uao7EiQVf25ye+8VmkQBWzvb8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:6149

Targets

    • Target

      pXdN91.armv5l.elf

    • Size

      125KB

    • MD5

      d3368ac27728d9bd4016d0020ae7d541

    • SHA1

      82b5b7d665df7fdb52a72f643428189607b6cce0

    • SHA256

      17556533f2e2c0408b1096f4e932c87664258b56254c0f21cd26301b1a45d8c5

    • SHA512

      4320e5588216b40bac6c72e1c1e932f41c3320f46c28cb7d8ad3b5b0c917909c86c9ed2760e102a3351e8f1812cbd55f3356e85c242ae611f7c6b1c0ebff1636

    • SSDEEP

      3072:5siuapO7EPDLzg9QVf2vhyeoh78VmkQBWzXvb8:/uao7EiQVf25ye+8VmkQBWzvb8

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks