General

  • Target

    ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf

  • Size

    141KB

  • Sample

    241128-ebjmkatqdt

  • MD5

    2eb75cd67dddb1819088d5438645a537

  • SHA1

    1d12cca1751fec45c640e52ad51b4a96f5f30890

  • SHA256

    ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782

  • SHA512

    b697c84f7d182e226689877ffcb28341628021c11deb292759313d4d43d09c2ac3bc0a91e3f28dfbe474124f7b9e13a71c6e82759c611a45fcb20bb3c0411a72

  • SSDEEP

    3072:sGGNZfCos2pA4FCL5hvikTam0/5ApYADn:hACyK40L5hvi9m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.38:4258

Targets

    • Target

      ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782.elf

    • Size

      141KB

    • MD5

      2eb75cd67dddb1819088d5438645a537

    • SHA1

      1d12cca1751fec45c640e52ad51b4a96f5f30890

    • SHA256

      ec08299037a58bc0f253a84e0f628faa59cb23cd24a1d25711314695649c6782

    • SHA512

      b697c84f7d182e226689877ffcb28341628021c11deb292759313d4d43d09c2ac3bc0a91e3f28dfbe474124f7b9e13a71c6e82759c611a45fcb20bb3c0411a72

    • SSDEEP

      3072:sGGNZfCos2pA4FCL5hvikTam0/5ApYADn:hACyK40L5hvi9m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks