General

  • Target

    6ef8713da51fd3de5482c0673552e46f2d9e549c74f84b505c64233c1479b2c1.elf

  • Size

    118KB

  • Sample

    241208-cwb24sxmct

  • MD5

    36d9d44c7ecaeb7e77036c51e0cfdbf8

  • SHA1

    f674eee0a858e3cc9ac600ffc4ad3e1c4184e118

  • SHA256

    6ef8713da51fd3de5482c0673552e46f2d9e549c74f84b505c64233c1479b2c1

  • SHA512

    bb01280142253e1cd4ab42ddf025afd7e943c3f52e1459858fa52d42e162161678051bc4531651a24f79093883832cfe01ecd649428fa68e135d0134037339cd

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/Vf4kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a04kDy+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.191:12345

Targets

    • Target

      6ef8713da51fd3de5482c0673552e46f2d9e549c74f84b505c64233c1479b2c1.elf

    • Size

      118KB

    • MD5

      36d9d44c7ecaeb7e77036c51e0cfdbf8

    • SHA1

      f674eee0a858e3cc9ac600ffc4ad3e1c4184e118

    • SHA256

      6ef8713da51fd3de5482c0673552e46f2d9e549c74f84b505c64233c1479b2c1

    • SHA512

      bb01280142253e1cd4ab42ddf025afd7e943c3f52e1459858fa52d42e162161678051bc4531651a24f79093883832cfe01ecd649428fa68e135d0134037339cd

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/Vf4kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a04kDy+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks