General

  • Target

    f19d648a13923d54d99831606aace15c56c2f17688df756167ccf7a67a3b836f.elf

  • Size

    150KB

  • Sample

    241205-d7neysxjez

  • MD5

    f33429244b9434ef2080825c41d0679b

  • SHA1

    fc70b769192c6db1dd87846157a71920c6f671f0

  • SHA256

    f19d648a13923d54d99831606aace15c56c2f17688df756167ccf7a67a3b836f

  • SHA512

    5427a2402f00f84762f530175802968803ba83dd6559013894a4d706e21788e10fa12c74e6a5a6d8f93128f8d6ee24dd826e2fe7f1d865f51a825a6a25f8572f

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAX5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

172.234.21.34:4258

Targets

    • Target

      f19d648a13923d54d99831606aace15c56c2f17688df756167ccf7a67a3b836f.elf

    • Size

      150KB

    • MD5

      f33429244b9434ef2080825c41d0679b

    • SHA1

      fc70b769192c6db1dd87846157a71920c6f671f0

    • SHA256

      f19d648a13923d54d99831606aace15c56c2f17688df756167ccf7a67a3b836f

    • SHA512

      5427a2402f00f84762f530175802968803ba83dd6559013894a4d706e21788e10fa12c74e6a5a6d8f93128f8d6ee24dd826e2fe7f1d865f51a825a6a25f8572f

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAX5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks