General

  • Target

    x86.xxx.elf

  • Size

    108KB

  • Sample

    241212-gdfpsswqgp

  • MD5

    7f68c15cea6c38bf51ddb688bf5e8575

  • SHA1

    f360a7af9a6eb8b0e41fdbbc3fdff822d5ddeb18

  • SHA256

    ebf918cbf3108878ce016eb5c602d73fa2561e637680cd86b798cbd526a7ad21

  • SHA512

    bf8a9e6dd0a810e1e392e4ba096d4090ac8d16ca5bf23c8d4f4bd94c48ad36e721e4e37410399b5f8738861d267d11c9bf705bd66c3ac69a1e127885f2cdcc2b

  • SSDEEP

    3072:3umlo71DhFGYvuoIpD/FXwOTumTT3gxHuW4:JoIZrumTT3gxuW4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:606

Targets

    • Target

      x86.xxx.elf

    • Size

      108KB

    • MD5

      7f68c15cea6c38bf51ddb688bf5e8575

    • SHA1

      f360a7af9a6eb8b0e41fdbbc3fdff822d5ddeb18

    • SHA256

      ebf918cbf3108878ce016eb5c602d73fa2561e637680cd86b798cbd526a7ad21

    • SHA512

      bf8a9e6dd0a810e1e392e4ba096d4090ac8d16ca5bf23c8d4f4bd94c48ad36e721e4e37410399b5f8738861d267d11c9bf705bd66c3ac69a1e127885f2cdcc2b

    • SSDEEP

      3072:3umlo71DhFGYvuoIpD/FXwOTumTT3gxHuW4:JoIZrumTT3gxuW4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks