General

  • Target

    mips.xxx.elf

  • Size

    148KB

  • Sample

    241212-gdf1kasmcs

  • MD5

    1703d90197e3b1b63af72be9d5cd6a2a

  • SHA1

    e7387ee6540102b990d6e5d2654976a5498bc8a1

  • SHA256

    dda99de4531968c47c047e03233f35071cecd94320ff46e967d074934f634669

  • SHA512

    d2c574e1438869570f4c9b22c092bae054de9aade23e126353e546b4147ac45bebd9c0fca7e5df90f33aa10430f40658a679272f4bbd1fbbcb42a75bc6a5770a

  • SSDEEP

    3072:w2ykw74kHJDcLpIGusHLusLrmNBymgYmPQ:FqHVcFxLusLrmNBymXmPQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:606

Targets

    • Target

      mips.xxx.elf

    • Size

      148KB

    • MD5

      1703d90197e3b1b63af72be9d5cd6a2a

    • SHA1

      e7387ee6540102b990d6e5d2654976a5498bc8a1

    • SHA256

      dda99de4531968c47c047e03233f35071cecd94320ff46e967d074934f634669

    • SHA512

      d2c574e1438869570f4c9b22c092bae054de9aade23e126353e546b4147ac45bebd9c0fca7e5df90f33aa10430f40658a679272f4bbd1fbbcb42a75bc6a5770a

    • SSDEEP

      3072:w2ykw74kHJDcLpIGusHLusLrmNBymgYmPQ:FqHVcFxLusLrmNBymXmPQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks