General

  • Target

    pXdN91.armv5l.elf

  • Size

    125KB

  • Sample

    241207-hbn4tswndp

  • MD5

    13610ed1bc6c77d4d4439262b9917fbc

  • SHA1

    3fdd202cbdb7ff862d85dc36378d41169cb03058

  • SHA256

    df4a2612708da4f04c0e9f9f5f86c9d5f8583fd0a7f49846f614f8f894cf6f36

  • SHA512

    855c518f6d1481f395bc765d150bb8a7c51c0faddb9d7a75b64cd4032831e8bb4a8b3de25a49bfdfc1573e1c4ecb27b0a1cb4940cd47386525973751092ea08f

  • SSDEEP

    3072:5siuapO7EPDLzg9QLf2vhyeoh78VmkQBWzXvb8:/uao7EiQLf25ye+8VmkQBWzvb8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:1999

Targets

    • Target

      pXdN91.armv5l.elf

    • Size

      125KB

    • MD5

      13610ed1bc6c77d4d4439262b9917fbc

    • SHA1

      3fdd202cbdb7ff862d85dc36378d41169cb03058

    • SHA256

      df4a2612708da4f04c0e9f9f5f86c9d5f8583fd0a7f49846f614f8f894cf6f36

    • SHA512

      855c518f6d1481f395bc765d150bb8a7c51c0faddb9d7a75b64cd4032831e8bb4a8b3de25a49bfdfc1573e1c4ecb27b0a1cb4940cd47386525973751092ea08f

    • SSDEEP

      3072:5siuapO7EPDLzg9QLf2vhyeoh78VmkQBWzXvb8:/uao7EiQLf25ye+8VmkQBWzvb8

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks