General

  • Target

    382dd8c9aa4c5bf15e9963e28df0803de3003c8afac6460c30bfdc28b90d0103.elf

  • Size

    141KB

  • Sample

    241205-ctw99szjfm

  • MD5

    f2f96c59f84874aa5a97d8a53863da5c

  • SHA1

    02498ccabb49c535fe27c3ad4e6909567d997475

  • SHA256

    382dd8c9aa4c5bf15e9963e28df0803de3003c8afac6460c30bfdc28b90d0103

  • SHA512

    9829e28fb877ec9161a5a1ae6bfb83a1a8f5263a1f78a9bbaf2b5b0be739358d24c364e0690c831ca0c34f8f365637d3e11ef6085b1d62f8c2f4b5aa03df055f

  • SSDEEP

    3072:sGGNZfCos2pA4FCh5hvikTam0/5ApYADn:hACyK40h5hvi9m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

172.234.21.34:4258

Targets

    • Target

      382dd8c9aa4c5bf15e9963e28df0803de3003c8afac6460c30bfdc28b90d0103.elf

    • Size

      141KB

    • MD5

      f2f96c59f84874aa5a97d8a53863da5c

    • SHA1

      02498ccabb49c535fe27c3ad4e6909567d997475

    • SHA256

      382dd8c9aa4c5bf15e9963e28df0803de3003c8afac6460c30bfdc28b90d0103

    • SHA512

      9829e28fb877ec9161a5a1ae6bfb83a1a8f5263a1f78a9bbaf2b5b0be739358d24c364e0690c831ca0c34f8f365637d3e11ef6085b1d62f8c2f4b5aa03df055f

    • SSDEEP

      3072:sGGNZfCos2pA4FCh5hvikTam0/5ApYADn:hACyK40h5hvi9m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks