General

  • Target

    fruit.mips.elf

  • Size

    141KB

  • Sample

    241211-17c1jsvmen

  • MD5

    02f8364b9a0634dc0660d9e13dc36812

  • SHA1

    d25c02d45b5dfa9ca3204cbee04f082c19a8ef86

  • SHA256

    9f2128346e65a692ca03c810f804a07c2455d7455a9bcd51599b9c0937cd5d1a

  • SHA512

    2961469c56eb021cf0a6de8348237e4f3b2814c62249facfc1924565361974d71681ecef6855b40e83ca3ff836c268b7823a1b1a7673de8b8a3e6a343bc114c0

  • SSDEEP

    3072:sGGNZfCos2pA4FCM5hvikTam0/5ApYADn:hACyK40M5hvi9m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      fruit.mips.elf

    • Size

      141KB

    • MD5

      02f8364b9a0634dc0660d9e13dc36812

    • SHA1

      d25c02d45b5dfa9ca3204cbee04f082c19a8ef86

    • SHA256

      9f2128346e65a692ca03c810f804a07c2455d7455a9bcd51599b9c0937cd5d1a

    • SHA512

      2961469c56eb021cf0a6de8348237e4f3b2814c62249facfc1924565361974d71681ecef6855b40e83ca3ff836c268b7823a1b1a7673de8b8a3e6a343bc114c0

    • SSDEEP

      3072:sGGNZfCos2pA4FCM5hvikTam0/5ApYADn:hACyK40M5hvi9m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks