Overview

overview

10

Static

static

10

4254bafb8d...42.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43143b2833784b413a38996b25772c6a.bin

  • Size

    63KB

  • Sample

    241209-blcp8axkbz

  • MD5

    5a879aca1893c705b1a069c8e4990ae2

  • SHA1

    7bcac515dd73ec35252856880ef779587858188c

  • SHA256

    bddc2108173a0c738ea4b887eea485bca65281de2883b92f97150034f2e55b7e

  • SHA512

    2219d1433d1047dfeffc70f93d4a101d7cd9bbaba71304533c2391fb970df08239afbd0af72f4ff2d2b1eb5125fee9c5b83f708f2990785bb43405349a0447b7

  • SSDEEP

    1536:e1/lhdAUV4mmBpBJbBeXDidL8sGd1uHKtcM6noYUmc9t/E2a3:e1/lLzV2BhYXDurqwkcMPYU7/xa3

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

87.120.112.101:405

Targets

    • Target

      4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642.elf

    • Size

      201KB

    • MD5

      43143b2833784b413a38996b25772c6a

    • SHA1

      6d679f4d1e67a2e6013fb229d0eee3bf700d062f

    • SHA256

      4254bafb8d35e32e0b3c6538af6dc09a1983413fecb9041288ffb2f27d022642

    • SHA512

      291e2ecabb440a984c9982f3dc4a3ea758ba920d5968ab445a8395634fb432f087a69c7dbfcff325eee7e1f770b5bd658b177f592843eef86aebe63f4ef66a5c

    • SSDEEP

      3072:cwUYLxnchhsecl1NeetJ8add9QzhsAfUMCmQR22bvxZ:7UEqhtwietJ8addQdfUMCmQR2mvxZ

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks