General

  • Target

    4377d8b65fb70d785741a6f87bfb0827cecf9a954ceb7031c86413be57d89873.elf

  • Size

    150KB

  • Sample

    241129-dg3ryswrhq

  • MD5

    24eaa63bea2ee62fd1415ad4ec77e7a4

  • SHA1

    68ac9a07fc05f33045c4e68970f249d05aee37cb

  • SHA256

    4377d8b65fb70d785741a6f87bfb0827cecf9a954ceb7031c86413be57d89873

  • SHA512

    6e9e2e179e5056124cb74aa6ec05332fce855279335247aebe00a3d1062864e4244f47dcd4c901e1afd76a8810a9ad7aa7e23730ba49395195e7f6cc5eaca246

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAw5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.101:4258

Targets

    • Target

      4377d8b65fb70d785741a6f87bfb0827cecf9a954ceb7031c86413be57d89873.elf

    • Size

      150KB

    • MD5

      24eaa63bea2ee62fd1415ad4ec77e7a4

    • SHA1

      68ac9a07fc05f33045c4e68970f249d05aee37cb

    • SHA256

      4377d8b65fb70d785741a6f87bfb0827cecf9a954ceb7031c86413be57d89873

    • SHA512

      6e9e2e179e5056124cb74aa6ec05332fce855279335247aebe00a3d1062864e4244f47dcd4c901e1afd76a8810a9ad7aa7e23730ba49395195e7f6cc5eaca246

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAw5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTx5hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks