Overview

overview

10

Static

static

10

98e7a67e16...24.elf

debian-12-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02edcf81f90fa0073933ff444cf9c551.bin

  • Size

    51KB

  • Sample

    241212-bctmdavlct

  • MD5

    784ae0338e41aded7ef85fb63b7ead35

  • SHA1

    fb367968fe33e351cd4bc5f874b7b3392d26ccb5

  • SHA256

    e4c2b731c29075faf191aac3bb3036c18be652c1a6c28015c9ee03fbc09d59bd

  • SHA512

    b57ce6ad485cb0afd53b026e019f0b0fbd48429328a5a568d00cdfcb30fe9e74b4004a31c7a0841061481b9c7a73c1d97b3af1ab4b04f998ad6c0dbeabf456a7

  • SSDEEP

    768:kYE584I2/FMfKnkV+5lupIb4n9jDaOLEYUTXqKTxtBWGnsRs5RVRVQKaT2EGD:DCxowlupIS9j2OIZXqKdTNz53EKo2E8

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24.elf

    • Size

      118KB

    • MD5

      02edcf81f90fa0073933ff444cf9c551

    • SHA1

      948e1b1e5f9d7bd281c6e7bab0afece688996461

    • SHA256

      98e7a67e16f8ce69c4f3601e484e3325491a4a2fa56bebe321621850e8774a24

    • SHA512

      9178b1b5573b77a3e097b844a6ef5e41144ab1ebe83c311230d2cfcde7d9c84dac7e0225a4b78ff324027e86520889af2578cbb0dba8f9b13f7191ec274b118a

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VfrkDN0dn+mTQOY5NX3cn:9YPUfsgEo2a0rkDy+mTQOY5R3cn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks