General

  • Target

    6004afbf16a448911edd97621736e1d505847237a60542632ed9b8f380256787.elf

  • Size

    206KB

  • Sample

    241207-c7e8xa1qcs

  • MD5

    41b0939b32593f7c5689a961e023b7ae

  • SHA1

    7f431d32bf2497ee96fc4998e2ec8b35d389fca9

  • SHA256

    6004afbf16a448911edd97621736e1d505847237a60542632ed9b8f380256787

  • SHA512

    21cb624d5cdc692e2da05390116217711d00e4a4dd67ce1e193822ba80c9b0a5bcda4be7cf6b3f90abd62beece6502eb572c0be397fd25da2930f9456e9d8617

  • SSDEEP

    3072:ofERgrUwbMV02s2xpb7UuE11xWXFb1lpXpuGYEA6s9:YERgrUx02fxZUuE1rWXFb1lpsGYEE9

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.216.18.82:9999

Targets

    • Target

      6004afbf16a448911edd97621736e1d505847237a60542632ed9b8f380256787.elf

    • Size

      206KB

    • MD5

      41b0939b32593f7c5689a961e023b7ae

    • SHA1

      7f431d32bf2497ee96fc4998e2ec8b35d389fca9

    • SHA256

      6004afbf16a448911edd97621736e1d505847237a60542632ed9b8f380256787

    • SHA512

      21cb624d5cdc692e2da05390116217711d00e4a4dd67ce1e193822ba80c9b0a5bcda4be7cf6b3f90abd62beece6502eb572c0be397fd25da2930f9456e9d8617

    • SSDEEP

      3072:ofERgrUwbMV02s2xpb7UuE11xWXFb1lpXpuGYEA6s9:YERgrUx02fxZUuE1rWXFb1lpsGYEE9

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks