General

  • Target

    549c7160c4f216a39a1c196bb81608ff3660db25567a9812d1c3fbb32e9b71fb.elf

  • Size

    83KB

  • Sample

    241208-crsjasxkcz

  • MD5

    ce84b3d3542d8529d4e2e93b9b8ff4ef

  • SHA1

    ae7df4142468b242959b8597df9ae038c93ccc73

  • SHA256

    549c7160c4f216a39a1c196bb81608ff3660db25567a9812d1c3fbb32e9b71fb

  • SHA512

    59b7d4870ccb04b5b5c00dcb2b70fb77cdcf91a0fb5bfe4265a3c64446a17352b837b05df8d5d33618f36dd42a5be9864eb713a9ae38fc8f291af11025a6b3b7

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8LKWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y22oRmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      549c7160c4f216a39a1c196bb81608ff3660db25567a9812d1c3fbb32e9b71fb.elf

    • Size

      83KB

    • MD5

      ce84b3d3542d8529d4e2e93b9b8ff4ef

    • SHA1

      ae7df4142468b242959b8597df9ae038c93ccc73

    • SHA256

      549c7160c4f216a39a1c196bb81608ff3660db25567a9812d1c3fbb32e9b71fb

    • SHA512

      59b7d4870ccb04b5b5c00dcb2b70fb77cdcf91a0fb5bfe4265a3c64446a17352b837b05df8d5d33618f36dd42a5be9864eb713a9ae38fc8f291af11025a6b3b7

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8LKWDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y22oRmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks