General

  • Target

    0377319850bb24e58f1f2a7f9716629cf9000a0618e8f044761c8022d8c465e1.elf

  • Size

    150KB

  • Sample

    241213-chxfwswqhj

  • MD5

    6e8aed6afbd8bc27526f0dcd2c87eae6

  • SHA1

    7850d229d0867709131b68c23472f2e435c8d6d1

  • SHA256

    0377319850bb24e58f1f2a7f9716629cf9000a0618e8f044761c8022d8c465e1

  • SHA512

    b75fbdcdba0d40fc5dfd0723cf061db3a4f86f955acca26c4ea62a4c27867aee766ae3e6054caa16cf768c3e221bbd5778a3c8ec1a86b7e68699a0b3aa5b6800

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAi5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT75hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      0377319850bb24e58f1f2a7f9716629cf9000a0618e8f044761c8022d8c465e1.elf

    • Size

      150KB

    • MD5

      6e8aed6afbd8bc27526f0dcd2c87eae6

    • SHA1

      7850d229d0867709131b68c23472f2e435c8d6d1

    • SHA256

      0377319850bb24e58f1f2a7f9716629cf9000a0618e8f044761c8022d8c465e1

    • SHA512

      b75fbdcdba0d40fc5dfd0723cf061db3a4f86f955acca26c4ea62a4c27867aee766ae3e6054caa16cf768c3e221bbd5778a3c8ec1a86b7e68699a0b3aa5b6800

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAi5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT75hWTGZWYxVldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks