General

  • Target

    weedntpd.elf

  • Size

    201KB

  • Sample

    241207-r21d8azrgl

  • MD5

    43143b2833784b413a38996b25772c6a

  • SHA1

    6d679f4d1e67a2e6013fb229d0eee3bf700d062f

  • SHA256

    4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642

  • SHA512

    291e2ecabb440a984c9982f3dc4a3ea758ba920d5968ab445a8395634fb432f087a69c7dbfcff325eee7e1f770b5bd658b177f592843eef86aebe63f4ef66a5c

  • SSDEEP

    3072:cwUYLxnchhsecl1NeetJ8add9QzhsAfUMCmQR22bvxZ:7UEqhtwietJ8addQdfUMCmQR2mvxZ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.120.112.101:405

Targets

    • Target

      weedntpd.elf

    • Size

      201KB

    • MD5

      43143b2833784b413a38996b25772c6a

    • SHA1

      6d679f4d1e67a2e6013fb229d0eee3bf700d062f

    • SHA256

      4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642

    • SHA512

      291e2ecabb440a984c9982f3dc4a3ea758ba920d5968ab445a8395634fb432f087a69c7dbfcff325eee7e1f770b5bd658b177f592843eef86aebe63f4ef66a5c

    • SSDEEP

      3072:cwUYLxnchhsecl1NeetJ8add9QzhsAfUMCmQR22bvxZ:7UEqhtwietJ8addQdfUMCmQR2mvxZ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks