General

  • Target

    5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf

  • Size

    92KB

  • Sample

    241129-dzcy9ayjal

  • MD5

    31f0203b819f3326a06cd5e2219c3fb1

  • SHA1

    02cdbf34dde6b9f70273deac29135e1790dd6ee4

  • SHA256

    5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477

  • SHA512

    bb96630796ab9150962d213a13829aeafa4a078a45d00514a30aa362120fef096055a81e6d1616dab98f636b63ea57f2a06957fa7045adfcf902f60edd6e5742

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3VSZmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKl+m/KWOXF7aR

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.4:606

Targets

    • Target

      5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf

    • Size

      92KB

    • MD5

      31f0203b819f3326a06cd5e2219c3fb1

    • SHA1

      02cdbf34dde6b9f70273deac29135e1790dd6ee4

    • SHA256

      5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477

    • SHA512

      bb96630796ab9150962d213a13829aeafa4a078a45d00514a30aa362120fef096055a81e6d1616dab98f636b63ea57f2a06957fa7045adfcf902f60edd6e5742

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3VSZmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKl+m/KWOXF7aR

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks