General

  • Target

    m-i.p-s.Logicnet.elf

  • Size

    123KB

  • Sample

    241203-zj95psyngj

  • MD5

    3cf759e34bb84133514e83f3bda2dfab

  • SHA1

    d1f0d784da2fe778cced199c29fd90d743a8f89a

  • SHA256

    8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933

  • SHA512

    db52e93fe789ad2fefffad7436322d6bfb3e2ca7e2e56e6bff27b8f94923dfca1d8da688360b5283a06b9eea3bea68ef720d7b73d87dbce1dac9eed8371c4091

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe9Ed5jFeagrmW+i:Ted0W0MZQHpd5BeagrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Targets

    • Target

      m-i.p-s.Logicnet.elf

    • Size

      123KB

    • MD5

      3cf759e34bb84133514e83f3bda2dfab

    • SHA1

      d1f0d784da2fe778cced199c29fd90d743a8f89a

    • SHA256

      8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933

    • SHA512

      db52e93fe789ad2fefffad7436322d6bfb3e2ca7e2e56e6bff27b8f94923dfca1d8da688360b5283a06b9eea3bea68ef720d7b73d87dbce1dac9eed8371c4091

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe9Ed5jFeagrmW+i:Ted0W0MZQHpd5BeagrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks