General

  • Target

    d357d3c0ff0544d9e76dd260e1aefcbd45940e98802e41f7209d3a9c4a1c0dc8.elf

  • Size

    156KB

  • Sample

    241211-d3hnxavkcy

  • MD5

    d92ea94f6188bf97a1c710facb42b999

  • SHA1

    abf1052505dea67fe274600c83d0ef0a972c6cbf

  • SHA256

    d357d3c0ff0544d9e76dd260e1aefcbd45940e98802e41f7209d3a9c4a1c0dc8

  • SHA512

    4fc4557417225491ada7bbe1e21ccda2af9e29c9d828f3e8521e4784ef097975c67be4369cf574211bf9f8c0ba1f244d48341769f7d028341a733946ea5bbdaf

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBwYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/uYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      d357d3c0ff0544d9e76dd260e1aefcbd45940e98802e41f7209d3a9c4a1c0dc8.elf

    • Size

      156KB

    • MD5

      d92ea94f6188bf97a1c710facb42b999

    • SHA1

      abf1052505dea67fe274600c83d0ef0a972c6cbf

    • SHA256

      d357d3c0ff0544d9e76dd260e1aefcbd45940e98802e41f7209d3a9c4a1c0dc8

    • SHA512

      4fc4557417225491ada7bbe1e21ccda2af9e29c9d828f3e8521e4784ef097975c67be4369cf574211bf9f8c0ba1f244d48341769f7d028341a733946ea5bbdaf

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBwYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/uYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks