General

  • Target

    2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf

  • Size

    98KB

  • Sample

    241211-cs5v1swkel

  • MD5

    52bc63fd650de35bc245573ae44ea364

  • SHA1

    6e368a8a81f40675b449703bce52bee1533dd0e4

  • SHA256

    2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867

  • SHA512

    6caa8497bff776038ae51070f237e71ea13feeb3f82bae1a3c2314be9eb757aee96254fdb938d5892ebddb04ff15e958fef27a8ade93d5f1d08e931dc49d0a58

  • SSDEEP

    3072:VSx+i6mqaObhNCnPNKV+qKmZuqQ4DPwXXtse:y6mRObnCnP7qKmZuqQ4DPwXXtse

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867.elf

    • Size

      98KB

    • MD5

      52bc63fd650de35bc245573ae44ea364

    • SHA1

      6e368a8a81f40675b449703bce52bee1533dd0e4

    • SHA256

      2f530823763542f3b6fd2a9a3a32a44fdab8f266edc7dbbf1551045fdb72c867

    • SHA512

      6caa8497bff776038ae51070f237e71ea13feeb3f82bae1a3c2314be9eb757aee96254fdb938d5892ebddb04ff15e958fef27a8ade93d5f1d08e931dc49d0a58

    • SSDEEP

      3072:VSx+i6mqaObhNCnPNKV+qKmZuqQ4DPwXXtse:y6mRObnCnP7qKmZuqQ4DPwXXtse

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks