General

  • Target

    roze.x86.elf

  • Size

    155KB

  • Sample

    241206-qhvh7avmfl

  • MD5

    2cfb6543d1b4012f6c6aae0d047363a4

  • SHA1

    95a15fecb5bb19a0134fb8a3c2c8f7ce6c595184

  • SHA256

    a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6

  • SHA512

    7084f46039ea06a3c7e7af1da6178984e297736f8b47279e9c11928586cdbc39862192e24db5886b83f1b95069f5d14930cae2806402b1b1268b579882dcca76

  • SSDEEP

    3072:a8L2FlZkCzC2TCX5hGhfDphahpCn38n9VAlZn31mBT38dAY4:Mr1Dphabkm6lmBT38dAY4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.91.127.27:87

Targets

    • Target

      roze.x86.elf

    • Size

      155KB

    • MD5

      2cfb6543d1b4012f6c6aae0d047363a4

    • SHA1

      95a15fecb5bb19a0134fb8a3c2c8f7ce6c595184

    • SHA256

      a8fe559c4496f75c9af90086635c6f0722610c27094cf9d31c44b448359a74f6

    • SHA512

      7084f46039ea06a3c7e7af1da6178984e297736f8b47279e9c11928586cdbc39862192e24db5886b83f1b95069f5d14930cae2806402b1b1268b579882dcca76

    • SSDEEP

      3072:a8L2FlZkCzC2TCX5hGhfDphahpCn38n9VAlZn31mBT38dAY4:Mr1Dphabkm6lmBT38dAY4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks