General

  • Target

    pXdN91.x68.elf

  • Size

    118KB

  • Sample

    241209-mydntszldm

  • MD5

    a40eb9d6b26d3a809958741610892112

  • SHA1

    b6fd7c54e8805e6e9c74f9557bcf3c7750c5386a

  • SHA256

    e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a

  • SHA512

    c1e6be1af8773d1723a1e33c1e84322c6985e6bb7ac046bf09bf7e369854cc75fff05613e2922e061ef0b75de1097ab9335d6e1083f80829f88323ca2722b584

  • SSDEEP

    3072:xMxB5Tc9xfHxFScXcki+TMoc6Qgmom0ea7HWvP:Cxs9x/gkjLGom0eaTWvP

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:13387

Targets

    • Target

      pXdN91.x68.elf

    • Size

      118KB

    • MD5

      a40eb9d6b26d3a809958741610892112

    • SHA1

      b6fd7c54e8805e6e9c74f9557bcf3c7750c5386a

    • SHA256

      e5f0827ec098a78ab74ca7fa6b129330acaed4e2fa005d0c3a590f6d479d5e4a

    • SHA512

      c1e6be1af8773d1723a1e33c1e84322c6985e6bb7ac046bf09bf7e369854cc75fff05613e2922e061ef0b75de1097ab9335d6e1083f80829f88323ca2722b584

    • SSDEEP

      3072:xMxB5Tc9xfHxFScXcki+TMoc6Qgmom0ea7HWvP:Cxs9x/gkjLGom0eaTWvP

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks