Overview

overview

10

Static

static

10

5e8a40db68...77.elf

ubuntu-24.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31f0203b819f3326a06cd5e2219c3fb1.bin

  • Size

    41KB

  • Sample

    241130-bg3e3szlen

  • MD5

    e0d4a7956491f5c668f8443b71a61956

  • SHA1

    21d89ac0f87442db56f9fdbb6e79bf73ebd0e9c0

  • SHA256

    339c3bd9c7210e97274af775f2e7dce47eb262670555598443ea9f5b6b89baee

  • SHA512

    2cebfd830b9c4607ca8162c749a7497a6d71fc304fd3c2fedc7140340f192d5f35681bf3244b077496c18b3801a3d7c740f68a75993ae4905247a846ab7d725e

  • SSDEEP

    768:lXuEYGTJxlPhpdxr3p1EmmXDPdwqp1mje5rBlUkEshotooDekwGUM1/PLwKp:5NYSPlDdxF6XDlBUjepBSkvoGoqkwGU+

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.4:606

Targets

    • Target

      5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477.elf

    • Size

      92KB

    • MD5

      31f0203b819f3326a06cd5e2219c3fb1

    • SHA1

      02cdbf34dde6b9f70273deac29135e1790dd6ee4

    • SHA256

      5e8a40db68a0822e1324e8955c8e9a6417b8153298e4dc6ef4e4e5951aaf3477

    • SHA512

      bb96630796ab9150962d213a13829aeafa4a078a45d00514a30aa362120fef096055a81e6d1616dab98f636b63ea57f2a06957fa7045adfcf902f60edd6e5742

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3VSZmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKl+m/KWOXF7aR

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks