Overview

overview

10

Static

static

10

i586.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    i586.elf

  • Size

    78KB

  • Sample

    241206-shaj5atka1

  • MD5

    f3fc8e6f685806d2564f143bc949c14a

  • SHA1

    083ab18c5c43782bec6e624f5f699754266900a4

  • SHA256

    4c89cd2b86f4552081da6847b87bcae58ce907c39cd73bcc0c0f85487626f2d9

  • SHA512

    af41e5b13c86ff7f5fb59da17b5c4125216829654dcb40b687fa946a4f08ed49113f5866a0f7f70a92cacb93269d8279fcafbd62ac41ed84b9e00b54a9f91c6c

  • SSDEEP

    1536:8cs8XUAUvC1zbKOHr4Womg5yYUE31gY5r8ZHet3:8csaUAUvE/KOQdqY863

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

154.216.18.82:9999

Targets

    • Target

      i586.elf

    • Size

      78KB

    • MD5

      f3fc8e6f685806d2564f143bc949c14a

    • SHA1

      083ab18c5c43782bec6e624f5f699754266900a4

    • SHA256

      4c89cd2b86f4552081da6847b87bcae58ce907c39cd73bcc0c0f85487626f2d9

    • SHA512

      af41e5b13c86ff7f5fb59da17b5c4125216829654dcb40b687fa946a4f08ed49113f5866a0f7f70a92cacb93269d8279fcafbd62ac41ed84b9e00b54a9f91c6c

    • SSDEEP

      1536:8cs8XUAUvC1zbKOHr4Womg5yYUE31gY5r8ZHet3:8csaUAUvE/KOQdqY863

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks