Overview

overview

10

Static

static

10

8e6827182a...33.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3cf759e34bb84133514e83f3bda2dfab.bin

  • Size

    42KB

  • Sample

    241205-blawmawpcp

  • MD5

    00ae28bd2673e5b68c07a2a7188c5155

  • SHA1

    11b5496ab2f5ca6aeba6d9db81554e549598573f

  • SHA256

    bfd31692541787a90dbbc9a97ae2ebb1411abb422a63ac33f12df1b670b0c23e

  • SHA512

    ade7e0ff2c1dd4396ea927d851ebc5f7ffc198f5fd277b54e8ccc7419ea6bce67cc1da6364367c65f1873c36273f5d7993fb6a4f805beaddcaee87c1ec4aed74

  • SSDEEP

    768:EfqFpy93/meW7s7chMWwjXX/RFOR9aB3y3QzOzS2f8AF0vPRdy1gpzxkBJ9PW/Eu:/wt/mbM5XP2RC3y32sS2EAF+PRdyszka

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Targets

    • Target

      8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933.elf

    • Size

      123KB

    • MD5

      3cf759e34bb84133514e83f3bda2dfab

    • SHA1

      d1f0d784da2fe778cced199c29fd90d743a8f89a

    • SHA256

      8e6827182ab5956a65a9457d97e8d8e513196820f757d8c6bcfcd0ef8ee73933

    • SHA512

      db52e93fe789ad2fefffad7436322d6bfb3e2ca7e2e56e6bff27b8f94923dfca1d8da688360b5283a06b9eea3bea68ef720d7b73d87dbce1dac9eed8371c4091

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe9Ed5jFeagrmW+i:Ted0W0MZQHpd5BeagrmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks