General

  • Target

    arm61.elf

  • Size

    136KB

  • Sample

    241206-qhsplavmeq

  • MD5

    75139e27f4e6caeb834fea23104f9943

  • SHA1

    dbd370a62f724e83e734b3012ffab42126ad5883

  • SHA256

    f24cc0d41c2d7b7dbbbb5eea02ec271403d8d80248222f398632f7ba3fdecc9c

  • SHA512

    bfe603bf83d3b3ff1e902d0b203d7d6c737013e93e05c285e1aa8553fe6364a16897d2afbe2a62a587c05e9474a7d984487073d21fdf6d4fb49f15f711037fc1

  • SSDEEP

    3072:Sdf+fvEqa9FazYA7IboRhUe391CErktmCQA9FX9aH:ifWEqa9FaNhUe3DrktmCQA9Z9aH

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.120.115.168:23

Targets

    • Target

      arm61.elf

    • Size

      136KB

    • MD5

      75139e27f4e6caeb834fea23104f9943

    • SHA1

      dbd370a62f724e83e734b3012ffab42126ad5883

    • SHA256

      f24cc0d41c2d7b7dbbbb5eea02ec271403d8d80248222f398632f7ba3fdecc9c

    • SHA512

      bfe603bf83d3b3ff1e902d0b203d7d6c737013e93e05c285e1aa8553fe6364a16897d2afbe2a62a587c05e9474a7d984487073d21fdf6d4fb49f15f711037fc1

    • SSDEEP

      3072:Sdf+fvEqa9FazYA7IboRhUe391CErktmCQA9FX9aH:ifWEqa9FaNhUe3DrktmCQA9Z9aH

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks