General

  • Target

    roze.i586.elf

  • Size

    135KB

  • Sample

    241206-qjd8layqft

  • MD5

    67e62db3e7fd59d580f584b703328055

  • SHA1

    778e1f0efb88c0737e11b7591deda2f753542c1b

  • SHA256

    b7edcd4789331025839599e61abba27ce31d8d323831120f38e220fb6e566c5e

  • SHA512

    d78b692f0318c4e33c1811c42c061089d0248868968be7a01842edd523e0ffae051f048d41bb99d04ae43913878f3b8cb40e260083ad105400549a69d070a690

  • SSDEEP

    3072:jSO1SULUeU/UrUIyU7+mNXuuEVPx9+Igy5hoMGlWimJswdytNr9:jgIXSMCBmNX0Vp9+IV5hoMGl/mJswdyh

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.91.127.27:87

Targets

    • Target

      roze.i586.elf

    • Size

      135KB

    • MD5

      67e62db3e7fd59d580f584b703328055

    • SHA1

      778e1f0efb88c0737e11b7591deda2f753542c1b

    • SHA256

      b7edcd4789331025839599e61abba27ce31d8d323831120f38e220fb6e566c5e

    • SHA512

      d78b692f0318c4e33c1811c42c061089d0248868968be7a01842edd523e0ffae051f048d41bb99d04ae43913878f3b8cb40e260083ad105400549a69d070a690

    • SSDEEP

      3072:jSO1SULUeU/UrUIyU7+mNXuuEVPx9+Igy5hoMGlWimJswdytNr9:jgIXSMCBmNX0Vp9+IV5hoMGl/mJswdyh

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks