General

  • Target

    6e4276c87e308b06f616e3af1982df748411e022eef2b42db9017411561cbf43.elf

  • Size

    92KB

  • Sample

    241208-cv3tfaspap

  • MD5

    2e2b3b9e8d4e5938c625ff7db1858911

  • SHA1

    aa95bb9c29a63ea6b602384f025ad83c7442ce80

  • SHA256

    6e4276c87e308b06f616e3af1982df748411e022eef2b42db9017411561cbf43

  • SHA512

    10316b7ac1e3756957bcdee92ed26a2b59ae3af352e10cac8675a8f8efce7d450929ccbee9514b34bcc880289423d8586a0601748edfcf516ab5bc133e5ec10c

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3dyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKtifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      6e4276c87e308b06f616e3af1982df748411e022eef2b42db9017411561cbf43.elf

    • Size

      92KB

    • MD5

      2e2b3b9e8d4e5938c625ff7db1858911

    • SHA1

      aa95bb9c29a63ea6b602384f025ad83c7442ce80

    • SHA256

      6e4276c87e308b06f616e3af1982df748411e022eef2b42db9017411561cbf43

    • SHA512

      10316b7ac1e3756957bcdee92ed26a2b59ae3af352e10cac8675a8f8efce7d450929ccbee9514b34bcc880289423d8586a0601748edfcf516ab5bc133e5ec10c

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3dyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKtifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks