General

  • Target

    b590051401b537f0a097207ed96157755ee6667914ef119d3cb67582c7afacd0.elf

  • Size

    80KB

  • Sample

    241202-deqdva1mer

  • MD5

    2e765d01e23359b62aabd1d2afbe6f7e

  • SHA1

    a9af5d9f4ca0a48718f81ac499fdd384d990e14e

  • SHA256

    b590051401b537f0a097207ed96157755ee6667914ef119d3cb67582c7afacd0

  • SHA512

    2d5885b2a733f448bae2d3b800422baf8059ffcc3322036575f59e65cbc3e2b52bf47823b51b7ee1eb50b63b72efc89d5316de281fdb87821a72356bfe13ec31

  • SSDEEP

    1536:A74X+IUTRuGwiwp4eRPgCpR3apWU4aa3S3C9VeJxYmoImu9GjDD2Yre:WaUTIvtRP3fCfa3OC9VeJxYmrmu9G3Du

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

85.209.17.110:888

Targets

    • Target

      b590051401b537f0a097207ed96157755ee6667914ef119d3cb67582c7afacd0.elf

    • Size

      80KB

    • MD5

      2e765d01e23359b62aabd1d2afbe6f7e

    • SHA1

      a9af5d9f4ca0a48718f81ac499fdd384d990e14e

    • SHA256

      b590051401b537f0a097207ed96157755ee6667914ef119d3cb67582c7afacd0

    • SHA512

      2d5885b2a733f448bae2d3b800422baf8059ffcc3322036575f59e65cbc3e2b52bf47823b51b7ee1eb50b63b72efc89d5316de281fdb87821a72356bfe13ec31

    • SSDEEP

      1536:A74X+IUTRuGwiwp4eRPgCpR3apWU4aa3S3C9VeJxYmoImu9GjDD2Yre:WaUTIvtRP3fCfa3OC9VeJxYmrmu9G3Du

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks