General

  • Target

    8b000eeea35addfc38758cc37d38c04ba081e5fa9d29f7de101b27d6e2f1b436.elf

  • Size

    167KB

  • Sample

    241211-dfqe8ssrcw

  • MD5

    e1c303c4444254e51480ea9e5047194d

  • SHA1

    92269f6b0628bdbbc2030babf2393bda7496b551

  • SHA256

    8b000eeea35addfc38758cc37d38c04ba081e5fa9d29f7de101b27d6e2f1b436

  • SHA512

    e99afe8b927755e218e711b026cde7dcea7db2d74be84e07a023ad70310d0b89535653540baba43ad942e760f8361e5553140647fcd6704c960b83f5509d8d92

  • SSDEEP

    3072:Fw1aOPNmJEgpYD98SD6qK4mXjBM/9bNGHdm+wN8dQSl2:y1aOPNmJFpLI674mXNM/9JGHdm+wN8OR

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

89.147.110.254:65489

Targets

    • Target

      8b000eeea35addfc38758cc37d38c04ba081e5fa9d29f7de101b27d6e2f1b436.elf

    • Size

      167KB

    • MD5

      e1c303c4444254e51480ea9e5047194d

    • SHA1

      92269f6b0628bdbbc2030babf2393bda7496b551

    • SHA256

      8b000eeea35addfc38758cc37d38c04ba081e5fa9d29f7de101b27d6e2f1b436

    • SHA512

      e99afe8b927755e218e711b026cde7dcea7db2d74be84e07a023ad70310d0b89535653540baba43ad942e760f8361e5553140647fcd6704c960b83f5509d8d92

    • SSDEEP

      3072:Fw1aOPNmJEgpYD98SD6qK4mXjBM/9bNGHdm+wN8dQSl2:y1aOPNmJFpLI674mXNM/9JGHdm+wN8OR

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks