General

  • Target

    51b54e3c53387002e596e2dbff9b0ec72b1f7ef6006611db910e2222a0d909cf.elf

  • Size

    118KB

  • Sample

    241208-crlezsxkbz

  • MD5

    2f01d5615322efff6f466b7690d54554

  • SHA1

    e6712b9e21a5f03e61a8985921304efa5b9f205b

  • SHA256

    51b54e3c53387002e596e2dbff9b0ec72b1f7ef6006611db910e2222a0d909cf

  • SHA512

    aa671310a927e90c8feea339d6e4b964727e93cc1be96cc582fc75b7b3ff22691dddf3f871bcf0447324a9c01d13a13d6a5b0f141d9a49531b83add780568814

  • SSDEEP

    3072:xMxB5Tc9xfHxFScXcAi+TMoc6bgmom0ea7HWvP:Cxs9x/gAjL5om0eaTWvP

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:1999

Targets

    • Target

      51b54e3c53387002e596e2dbff9b0ec72b1f7ef6006611db910e2222a0d909cf.elf

    • Size

      118KB

    • MD5

      2f01d5615322efff6f466b7690d54554

    • SHA1

      e6712b9e21a5f03e61a8985921304efa5b9f205b

    • SHA256

      51b54e3c53387002e596e2dbff9b0ec72b1f7ef6006611db910e2222a0d909cf

    • SHA512

      aa671310a927e90c8feea339d6e4b964727e93cc1be96cc582fc75b7b3ff22691dddf3f871bcf0447324a9c01d13a13d6a5b0f141d9a49531b83add780568814

    • SSDEEP

      3072:xMxB5Tc9xfHxFScXcAi+TMoc6bgmom0ea7HWvP:Cxs9x/gAjL5om0eaTWvP

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks