General

  • Target

    f4831bb7c37bb1f15ff63d16b4a3dd3f393a05899d5ffdb62501cd2ab9cf292f.elf

  • Size

    125KB

  • Sample

    241210-ee9m6axrcm

  • MD5

    d4234e29ddb89dd74326fe562636d5a0

  • SHA1

    671929ab4063d6a02a71a6e5fd5331a30d9b2ec7

  • SHA256

    f4831bb7c37bb1f15ff63d16b4a3dd3f393a05899d5ffdb62501cd2ab9cf292f

  • SHA512

    a5aa9f0989e19501ecc05e07529b38a46bc58807a3cfe51b4ac5a60eb9faf1c32c2eae34f515c69115fd6a20a76d6b2b4c49ba3945b541f733a315c6ef2e2c2a

  • SSDEEP

    3072:pg1Na9+vMPbLjgOIiY2u3uY+PqVmkQBWzXvb8:cNa8vMRIiY2u3u9qVmkQBWzvb8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:13387

Targets

    • Target

      f4831bb7c37bb1f15ff63d16b4a3dd3f393a05899d5ffdb62501cd2ab9cf292f.elf

    • Size

      125KB

    • MD5

      d4234e29ddb89dd74326fe562636d5a0

    • SHA1

      671929ab4063d6a02a71a6e5fd5331a30d9b2ec7

    • SHA256

      f4831bb7c37bb1f15ff63d16b4a3dd3f393a05899d5ffdb62501cd2ab9cf292f

    • SHA512

      a5aa9f0989e19501ecc05e07529b38a46bc58807a3cfe51b4ac5a60eb9faf1c32c2eae34f515c69115fd6a20a76d6b2b4c49ba3945b541f733a315c6ef2e2c2a

    • SSDEEP

      3072:pg1Na9+vMPbLjgOIiY2u3uY+PqVmkQBWzXvb8:cNa8vMRIiY2u3u9qVmkQBWzvb8

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks