General

  • Target

    f77e02f01a3daea6d37cbbf9456ad68ffa51cc20d1c455cad9346e1a0a99c39b.elf

  • Size

    162KB

  • Sample

    241208-dg3f7aypfz

  • MD5

    6964fe6708c8204ec460be246b521398

  • SHA1

    9f8a499bb774efc2744889b918f51a391761d2b7

  • SHA256

    f77e02f01a3daea6d37cbbf9456ad68ffa51cc20d1c455cad9346e1a0a99c39b

  • SHA512

    9e2b3ce7fed5f2a7026add2df4c54bbb285ce4b35da194b33d4c09ba47ba0fcc5db01671716e8732e5b598272da233639283dce1e90857a2f8930368119f0a4d

  • SSDEEP

    3072:j3+u1eSNtOYvfxmP6hfhEutJ8adPF4KQTjsR3TFnUUQIHc2mnhvwHqSA:VvgMmPputJ8adPF4fGTQP2mnhvGqSA

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.120.112.101:405

Targets

    • Target

      f77e02f01a3daea6d37cbbf9456ad68ffa51cc20d1c455cad9346e1a0a99c39b.elf

    • Size

      162KB

    • MD5

      6964fe6708c8204ec460be246b521398

    • SHA1

      9f8a499bb774efc2744889b918f51a391761d2b7

    • SHA256

      f77e02f01a3daea6d37cbbf9456ad68ffa51cc20d1c455cad9346e1a0a99c39b

    • SHA512

      9e2b3ce7fed5f2a7026add2df4c54bbb285ce4b35da194b33d4c09ba47ba0fcc5db01671716e8732e5b598272da233639283dce1e90857a2f8930368119f0a4d

    • SSDEEP

      3072:j3+u1eSNtOYvfxmP6hfhEutJ8adPF4KQTjsR3TFnUUQIHc2mnhvwHqSA:VvgMmPputJ8adPF4fGTQP2mnhvGqSA

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks