General

  • Target

    48eae0b90e8d89eae9fd2c0a94016706109a4ab621ac0e7aa5d33dc4c734a1e2.elf

  • Size

    150KB

  • Sample

    241130-czex6sxnfv

  • MD5

    06127253e3f19f0fb415504868f8761c

  • SHA1

    2615d269b3806df355a40c06ad3a57e9373dca80

  • SHA256

    48eae0b90e8d89eae9fd2c0a94016706109a4ab621ac0e7aa5d33dc4c734a1e2

  • SHA512

    f4b590786b36b41bcf35359fb2cbe984d8694cef0e9b83dc852aa603dda05f906fe9cfeb7202961e4370c7bea5aac7cd3487cd4ee3f255a1fe9a40b79f45ea36

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.131.108.84:4258

Targets

    • Target

      48eae0b90e8d89eae9fd2c0a94016706109a4ab621ac0e7aa5d33dc4c734a1e2.elf

    • Size

      150KB

    • MD5

      06127253e3f19f0fb415504868f8761c

    • SHA1

      2615d269b3806df355a40c06ad3a57e9373dca80

    • SHA256

      48eae0b90e8d89eae9fd2c0a94016706109a4ab621ac0e7aa5d33dc4c734a1e2

    • SHA512

      f4b590786b36b41bcf35359fb2cbe984d8694cef0e9b83dc852aa603dda05f906fe9cfeb7202961e4370c7bea5aac7cd3487cd4ee3f255a1fe9a40b79f45ea36

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAJ5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTc5hWTGZWYxVldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks