General

  • Target

    bad9c2b659ace332ebd53fd7c981da86a2ab28d1fc7e52721bfa90ad12df3dfd.elf

  • Size

    150KB

  • Sample

    241212-c6al2axpet

  • MD5

    6359f47c70662f00e5368b1889f7ca6f

  • SHA1

    cd76ea01e8f3d7c6d967f65250dd45a0dc9b91fd

  • SHA256

    bad9c2b659ace332ebd53fd7c981da86a2ab28d1fc7e52721bfa90ad12df3dfd

  • SHA512

    a68e59495b4235bcacb875d6ed303b26c509363815b2f94b2db6aadf09ed7754b11f9866e4db2d95259aa13fdef73e8986b6139867ec3edb268a866eb9a29c73

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAy5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTD5hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      bad9c2b659ace332ebd53fd7c981da86a2ab28d1fc7e52721bfa90ad12df3dfd.elf

    • Size

      150KB

    • MD5

      6359f47c70662f00e5368b1889f7ca6f

    • SHA1

      cd76ea01e8f3d7c6d967f65250dd45a0dc9b91fd

    • SHA256

      bad9c2b659ace332ebd53fd7c981da86a2ab28d1fc7e52721bfa90ad12df3dfd

    • SHA512

      a68e59495b4235bcacb875d6ed303b26c509363815b2f94b2db6aadf09ed7754b11f9866e4db2d95259aa13fdef73e8986b6139867ec3edb268a866eb9a29c73

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAy5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTD5hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks