General

  • Target

    c3a6894da6ba15938339e2aa53ff106411bc8e0991700b962405f1ab6e6e9926.elf

  • Size

    123KB

  • Sample

    241208-c61hfstlcp

  • MD5

    2f1791c71eb8814dfc8c24bbba5dd0ed

  • SHA1

    133b6be98bfe71843f80a4ec89e81ad575c62a14

  • SHA256

    c3a6894da6ba15938339e2aa53ff106411bc8e0991700b962405f1ab6e6e9926

  • SHA512

    37b0a7862e24ef560584a4bcc7591f700f86942fc8e9b1818754da0842d759cc380427a612daa64d3ce81ec565db628a610c08767d59fb93c2792e958e6970e8

  • SSDEEP

    1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpZ+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EL+Dw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      c3a6894da6ba15938339e2aa53ff106411bc8e0991700b962405f1ab6e6e9926.elf

    • Size

      123KB

    • MD5

      2f1791c71eb8814dfc8c24bbba5dd0ed

    • SHA1

      133b6be98bfe71843f80a4ec89e81ad575c62a14

    • SHA256

      c3a6894da6ba15938339e2aa53ff106411bc8e0991700b962405f1ab6e6e9926

    • SHA512

      37b0a7862e24ef560584a4bcc7591f700f86942fc8e9b1818754da0842d759cc380427a612daa64d3ce81ec565db628a610c08767d59fb93c2792e958e6970e8

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpZ+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EL+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks