General

  • Target

    5ed4496f9c43bf0f1e50d8dc4d05594371070944551afad25b113d9022c71dad.elf

  • Size

    150KB

  • Sample

    241213-czzbtaxmhl

  • MD5

    be121b0c3c2122f56658e934ca7668e7

  • SHA1

    edf20b2b0bf3bc2612fc2c6bb9375c4ff2143463

  • SHA256

    5ed4496f9c43bf0f1e50d8dc4d05594371070944551afad25b113d9022c71dad

  • SHA512

    4a88e161322caf7ed8f85a7e466feb7eaa82e8a4eae00f13ab83ffd9dfaf0a7e2ad7be27e511726ba13556437dce921b47cf9a262c30748093e651d027f0ecf8

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAi5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT75hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:4258

Targets

    • Target

      5ed4496f9c43bf0f1e50d8dc4d05594371070944551afad25b113d9022c71dad.elf

    • Size

      150KB

    • MD5

      be121b0c3c2122f56658e934ca7668e7

    • SHA1

      edf20b2b0bf3bc2612fc2c6bb9375c4ff2143463

    • SHA256

      5ed4496f9c43bf0f1e50d8dc4d05594371070944551afad25b113d9022c71dad

    • SHA512

      4a88e161322caf7ed8f85a7e466feb7eaa82e8a4eae00f13ab83ffd9dfaf0a7e2ad7be27e511726ba13556437dce921b47cf9a262c30748093e651d027f0ecf8

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAi5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT75hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks