Overview

overview

10

Static

static

10

a2d22be075...a5.elf

ubuntu-20.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    754bf7dba3e5467a150b5bbe601f2f89.bin

  • Size

    41KB

  • Sample

    241205-btw4ts1mc1

  • MD5

    66d802810232e2706e352e094083d9eb

  • SHA1

    71ed78226473456e5fa871ba2e8b54b9e802613c

  • SHA256

    663a94d4f96c9ddf0c40a6f860dc75988e820124d17921d6cac2d8fbbdfb4ee9

  • SHA512

    c35bc039cce65a833731bf8b3b685a7db6399bc9177db80b20cb01c3167a40f3e43e53bcee9e38c6f5225a8314ae5abbc568cf6e166e84d0d35adf38f20fc256

  • SSDEEP

    768:IDntlA6HCj8RftobueguYlA8Cxhg5XMRbdXv7MkapQ/MjLk95qy7ve+hrf9HDJNh:IDrviooaeguuBIhgBMRbdj0ScY95HF3b

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

195.201.59.165:1865

Targets

    • Target

      a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5.elf

    • Size

      92KB

    • MD5

      754bf7dba3e5467a150b5bbe601f2f89

    • SHA1

      2a0047905765dc42d4d2b04ca155c3a9b004f45c

    • SHA256

      a2d22be0752cfaae01a4227f4397033e38cc7d903c716458b54f01c811f67ba5

    • SHA512

      0f92f265b7ccba9eed163855e0ba3cca8734ffa929ec11eebae64a8df8f7a499819624d8f990867a9db43bbc34e2ba4643335e98c26685ab8bf097f74d7c7eca

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3OMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKeMvm/KWOXF7Y

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks