General

  • Target

    764c23b484e3f181fcb13dd8df2a6ce4f2ade4070cec254358fd3d2f8115c4c8.elf

  • Size

    150KB

  • Sample

    241212-cyqy2ssjbn

  • MD5

    3e3324c430caca52b7b5fdee3cb05200

  • SHA1

    61fce2b8bbbec6b3d8daed9142c4be019e9e5138

  • SHA256

    764c23b484e3f181fcb13dd8df2a6ce4f2ade4070cec254358fd3d2f8115c4c8

  • SHA512

    814dc21b9528fddb250c0955fad2c74e2863e20765cdac978ad6a109d9a35409ae93cf4b71e2e98c293e06d711e6bc3cdf606c1871206c70d7b7626e0d5919db

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAy5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTD5hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      764c23b484e3f181fcb13dd8df2a6ce4f2ade4070cec254358fd3d2f8115c4c8.elf

    • Size

      150KB

    • MD5

      3e3324c430caca52b7b5fdee3cb05200

    • SHA1

      61fce2b8bbbec6b3d8daed9142c4be019e9e5138

    • SHA256

      764c23b484e3f181fcb13dd8df2a6ce4f2ade4070cec254358fd3d2f8115c4c8

    • SHA512

      814dc21b9528fddb250c0955fad2c74e2863e20765cdac978ad6a109d9a35409ae93cf4b71e2e98c293e06d711e6bc3cdf606c1871206c70d7b7626e0d5919db

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAy5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTD5hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks