General

  • Target

    803eb1ce8f646ee182f26f2105ffe9aff0051ea975718e249ad6696bb6dc95d2.elf

  • Size

    123KB

  • Sample

    241129-d9c21ayngn

  • MD5

    1dc704be2a194e6f16b4432e7ee2d8c0

  • SHA1

    1b9ec5e42ae20b5ea1327b269cf38ffb5c7d91a8

  • SHA256

    803eb1ce8f646ee182f26f2105ffe9aff0051ea975718e249ad6696bb6dc95d2

  • SHA512

    485452317b819a46f8fb84787a8eb4cedcbdf66fde74d14c6c5b015da2fb227cdf140b46f67d088094e61005122e61d38681aa0a8d5bfba53abc5123567d0e20

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpR+DlIrmW+IFB1Df11hR/:/UyLqAmgMJM8E/+DlIrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.4:606

Targets

    • Target

      803eb1ce8f646ee182f26f2105ffe9aff0051ea975718e249ad6696bb6dc95d2.elf

    • Size

      123KB

    • MD5

      1dc704be2a194e6f16b4432e7ee2d8c0

    • SHA1

      1b9ec5e42ae20b5ea1327b269cf38ffb5c7d91a8

    • SHA256

      803eb1ce8f646ee182f26f2105ffe9aff0051ea975718e249ad6696bb6dc95d2

    • SHA512

      485452317b819a46f8fb84787a8eb4cedcbdf66fde74d14c6c5b015da2fb227cdf140b46f67d088094e61005122e61d38681aa0a8d5bfba53abc5123567d0e20

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpR+DlIrmW+IFB1Df11hR/:/UyLqAmgMJM8E/+DlIrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks