General

  • Target

    98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf

  • Size

    118KB

  • Sample

    241211-dhw1sstjet

  • MD5

    02edcf81f90fa0073933ff444cf9c551

  • SHA1

    948e1b1e5f9d7bd281c6e7bab0afece688996461

  • SHA256

    98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24

  • SHA512

    9178b1b5573b77a3e097b844a6ef5e41144ab1ebe83c311230d2cfcde7d9c84dac7e0225a4b78ff324027e86520889af2578cbb0dba8f9b13f7191ec274b118a

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/VfrkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0rkDy+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf

    • Size

      118KB

    • MD5

      02edcf81f90fa0073933ff444cf9c551

    • SHA1

      948e1b1e5f9d7bd281c6e7bab0afece688996461

    • SHA256

      98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24

    • SHA512

      9178b1b5573b77a3e097b844a6ef5e41144ab1ebe83c311230d2cfcde7d9c84dac7e0225a4b78ff324027e86520889af2578cbb0dba8f9b13f7191ec274b118a

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VfrkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0rkDy+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks