General

  • Target

    043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf

  • Size

    78KB

  • Sample

    241207-chhyhazlhv

  • MD5

    c39eb100d7867ca81882390ac31f277c

  • SHA1

    5e9775cb88f9278604e5f6ae7bbc7f638f325562

  • SHA256

    043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b

  • SHA512

    77afe996fc627a52d47c193b1684ece162267f60cf788d3701f85e257968234335913eb487f08e5bd2c8bc5aca16cf8e19c79c4cbf21c78b7aa3822a4a414527

  • SSDEEP

    1536:x39YCcP0zWbAtWb4WomRV7Ut31gaBlBir81Je53:dmrP0GAtz7q6lY81M3

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.216.18.82:9999

Targets

    • Target

      043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b.elf

    • Size

      78KB

    • MD5

      c39eb100d7867ca81882390ac31f277c

    • SHA1

      5e9775cb88f9278604e5f6ae7bbc7f638f325562

    • SHA256

      043e6c37078a24861d9d886df3398c8a930da701a3f13d1a65acba3adb3ba92b

    • SHA512

      77afe996fc627a52d47c193b1684ece162267f60cf788d3701f85e257968234335913eb487f08e5bd2c8bc5aca16cf8e19c79c4cbf21c78b7aa3822a4a414527

    • SSDEEP

      1536:x39YCcP0zWbAtWb4WomRV7Ut31gaBlBir81Je53:dmrP0GAtz7q6lY81M3

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks