General

  • Target

    b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9.elf

  • Size

    150KB

  • Sample

    241205-dmhnza1phm

  • MD5

    a2933870908b93eddb9a79ab994d27fa

  • SHA1

    069fe8388af605f6d69b4b8bc1d42c1df97e2dc5

  • SHA256

    b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9

  • SHA512

    5dd52f939e8b67e216d3964271f0076c5168af3c7158aab88293253e366e8a978b506d9c706847ffae3911ed6db193193d91c633bd7bda1635a96fdddf49f114

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAX5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

172.234.21.34:4258

Targets

    • Target

      b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9.elf

    • Size

      150KB

    • MD5

      a2933870908b93eddb9a79ab994d27fa

    • SHA1

      069fe8388af605f6d69b4b8bc1d42c1df97e2dc5

    • SHA256

      b27cb4f79ba1a3f97ec2d6c90103027c5838578286cb253fea503721388a98f9

    • SHA512

      5dd52f939e8b67e216d3964271f0076c5168af3c7158aab88293253e366e8a978b506d9c706847ffae3911ed6db193193d91c633bd7bda1635a96fdddf49f114

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAX5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTK5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks