General

  • Target

    m68k.elf

  • Size

    156KB

  • Sample

    241128-wftrrszrep

  • MD5

    b7d2cbeb78671b8dcfb5846918877a2a

  • SHA1

    5c8610176439f1c3c9d8f38352804b6c9dc0ca81

  • SHA256

    cecd5a009bb610884e9f402c3d70ac588ece8d9d920e4589417d41bad1a9f7e2

  • SHA512

    37ec90c8ac0ce37187b387bfbb74fa88222546187e8fcd869d67f5597a2e634d1b69d261d2d38784fd018f86557b03e01b081c47d7027d4acafed3bd1652e477

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBzYnyLRM/9HNmFwfBxKQodn:hg2hNNlzIkk/MOa/5YnydM/9tmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.4:606

Targets

    • Target

      m68k.elf

    • Size

      156KB

    • MD5

      b7d2cbeb78671b8dcfb5846918877a2a

    • SHA1

      5c8610176439f1c3c9d8f38352804b6c9dc0ca81

    • SHA256

      cecd5a009bb610884e9f402c3d70ac588ece8d9d920e4589417d41bad1a9f7e2

    • SHA512

      37ec90c8ac0ce37187b387bfbb74fa88222546187e8fcd869d67f5597a2e634d1b69d261d2d38784fd018f86557b03e01b081c47d7027d4acafed3bd1652e477

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBzYnyLRM/9HNmFwfBxKQodn:hg2hNNlzIkk/MOa/5YnydM/9tmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks