Overview

overview

10

Static

static

10

6ac5720313...fb.elf

debian-9-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    397bcfb06013b5359f9e344b30f9a961.bin

  • Size

    42KB

  • Sample

    241212-blgn6svngv

  • MD5

    e6a6473ef2b1f9c3150bb3201a72dbf3

  • SHA1

    92094396e383bc4d002b3993ba29c04832942c35

  • SHA256

    13a45053227644c91949165e2129a5be6e0872e4dc0355dd2c46dfa9e3fbe9cc

  • SHA512

    3041ebb256f09419b4c391d4e9a6de230a905fbeec91d65f3e90ad42b00683dbb3372a3fbc9bc2cdd1379be3c5ecbf91e653e94a9b8e785c7d8ca2b2fda46ace

  • SSDEEP

    768:R0elWfWuhDftTqUdJ7stzkpRzNkuLaWH6oBSRI04QYFCK9wVyou4aUa:R0Z+uhpqIrVdaLlGh9Mu4pa

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.251:12345

Targets

    • Target

      6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb.elf

    • Size

      123KB

    • MD5

      397bcfb06013b5359f9e344b30f9a961

    • SHA1

      2c531fb14397438f68dea2ad02c769b0270b9f47

    • SHA256

      6ac57203130207f6d1b33fd710356dbe5dd56fee6ddebe607a8dc3ee152bccfb

    • SHA512

      3c72765117c9be73f67d9b539d6e1fc7e1a4e0a89fd876bdcb43fa23da7a47f02ac544c7ea6abb2cef0fec50a2a6dedee4e4c46d371d0fd6d3a1c6b3b9ce381c

    • SSDEEP

      1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpK+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EI+Dw8rmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks