Overview

overview

10

Static

static

10

ea4b669059...47.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31f1e73d6d69bd7048efc723ba68dc43.bin

  • Size

    44KB

  • Sample

    241212-bk9zbsvnfx

  • MD5

    bfddab466b84bce1e092ecea28002f95

  • SHA1

    45c8a89e0f0a6e3db260678b30700a336addc35a

  • SHA256

    bb632c8c7802f3d7d63fed3023e7aeac02b20b18c4923f2c374384c092d67281

  • SHA512

    02899f3bf84f0ad28e866e6d4d7084ffc45a46e985860f0dcfcbd954db4393993333b3473d4853c7058190205fa74a404e9c7e23312c4c8acb23c66bc1508732

  • SSDEEP

    768:LB3pf3eiRHE6y9Mj0Hhr6KMKzcBD+wxyagHdziNFwys+nFrFy0SLvAck25:NBeiFEVMj0HhfMuk/sFiknurFyfL4cJ5

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347.elf

    • Size

      105KB

    • MD5

      31f1e73d6d69bd7048efc723ba68dc43

    • SHA1

      27ea7191b90d04baaf87af1b0ec2dda464702fac

    • SHA256

      ea4b669059899755ae9661c63f39505f62cf6e31509126bfa897fc24d35cd347

    • SHA512

      eae2def2f13ba9684e8be10751a9d23b02ab8389981832807143e045cf81740a8e38c3b53ead1efd7fcafab7b194c605915b2ffa1d9ec766681286e9ead905f3

    • SSDEEP

      3072:MSY+46m1qOzssLFPPKNy+AmkZrQAhPDCXFke:06mgOzJLFPzmkZrQAhPDCXFke

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks