General

  • Target

    09199d4288de8356b2ae0639ddde357cbfdeedcf4c4cadf2926e63bd9612ec50.elf

  • Size

    141KB

  • Sample

    241130-ckk6msxjaz

  • MD5

    3c650fecf7e2fb860b0c9db5a63689a7

  • SHA1

    6b61543188455ab110b508c4e9c273cb87b37236

  • SHA256

    09199d4288de8356b2ae0639ddde357cbfdeedcf4c4cadf2926e63bd9612ec50

  • SHA512

    9339188dd41ae775ea7ebf53701554ae1036028c138ce3afff6daddbe1693a6e95e59207370eaa85962da91b396746b640f610185ee9640bbf59fb29bb55355c

  • SSDEEP

    3072:lBXpqf9VHGn7vsn5htpRvHpVFm0/5ApYADn:llp4Wvsn5htvp7m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.131.108.84:4258

Targets

    • Target

      09199d4288de8356b2ae0639ddde357cbfdeedcf4c4cadf2926e63bd9612ec50.elf

    • Size

      141KB

    • MD5

      3c650fecf7e2fb860b0c9db5a63689a7

    • SHA1

      6b61543188455ab110b508c4e9c273cb87b37236

    • SHA256

      09199d4288de8356b2ae0639ddde357cbfdeedcf4c4cadf2926e63bd9612ec50

    • SHA512

      9339188dd41ae775ea7ebf53701554ae1036028c138ce3afff6daddbe1693a6e95e59207370eaa85962da91b396746b640f610185ee9640bbf59fb29bb55355c

    • SSDEEP

      3072:lBXpqf9VHGn7vsn5htpRvHpVFm0/5ApYADn:llp4Wvsn5htvp7m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks