General

  • Target

    a-.-r.-m.-4.elf

  • Size

    128KB

  • Sample

    241210-pjwxzavpgw

  • MD5

    a71de9124507c5f5d426f36b06df4b12

  • SHA1

    1adb8e7be055b70f9a25516dc0f8c0cbd9554578

  • SHA256

    2cd8e0f9b908921160430a03da14ee9df6ed80ca347d3d11320ad89963359578

  • SHA512

    74bc55058def66429732b591925a2fc6f50542c799fe64e71cb501925a626054bd29ad0974d8c6ff32b813a56b04f736f6a63b04c3eaa55840ce9b5c8a414c7b

  • SSDEEP

    3072:wHbK2v8mk9uF0KFCjl9c+oGMLJeFem/QpYnXOr2:0v8zKFM9c+oGMLIFem/QpYXOr2

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

89.147.110.254:65489

Targets

    • Target

      a-.-r.-m.-4.elf

    • Size

      128KB

    • MD5

      a71de9124507c5f5d426f36b06df4b12

    • SHA1

      1adb8e7be055b70f9a25516dc0f8c0cbd9554578

    • SHA256

      2cd8e0f9b908921160430a03da14ee9df6ed80ca347d3d11320ad89963359578

    • SHA512

      74bc55058def66429732b591925a2fc6f50542c799fe64e71cb501925a626054bd29ad0974d8c6ff32b813a56b04f736f6a63b04c3eaa55840ce9b5c8a414c7b

    • SSDEEP

      3072:wHbK2v8mk9uF0KFCjl9c+oGMLJeFem/QpYnXOr2:0v8zKFM9c+oGMLIFem/QpYXOr2

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks