General

  • Target

    e37fb89b069cfbdeb8f7692742e8dd47db7a9223829df0f71cba2dc0d4dcfe28.elf

  • Size

    106KB

  • Sample

    241212-dcc1qssndp

  • MD5

    f730fb8e310fb4727ac8dbb4be18286a

  • SHA1

    47a0d9f867d46168ea4b9e60089dc3077a60b7b6

  • SHA256

    e37fb89b069cfbdeb8f7692742e8dd47db7a9223829df0f71cba2dc0d4dcfe28

  • SHA512

    baacea8e943533f1fc81e89b25c9e390053dc44468ff926e702181a8c24076b92eb167f9e03f07d0b0936eceb37b84610cd537a6c27617b945d06cc7e4bcf83a

  • SSDEEP

    3072:j6dye4BmJQfphaZw/1vc45AzkSXmdRWaLHgb4:dfphaZcErmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      e37fb89b069cfbdeb8f7692742e8dd47db7a9223829df0f71cba2dc0d4dcfe28.elf

    • Size

      106KB

    • MD5

      f730fb8e310fb4727ac8dbb4be18286a

    • SHA1

      47a0d9f867d46168ea4b9e60089dc3077a60b7b6

    • SHA256

      e37fb89b069cfbdeb8f7692742e8dd47db7a9223829df0f71cba2dc0d4dcfe28

    • SHA512

      baacea8e943533f1fc81e89b25c9e390053dc44468ff926e702181a8c24076b92eb167f9e03f07d0b0936eceb37b84610cd537a6c27617b945d06cc7e4bcf83a

    • SSDEEP

      3072:j6dye4BmJQfphaZw/1vc45AzkSXmdRWaLHgb4:dfphaZcErmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks