General

  • Target

    a1dd96bf0bbdfa8b4bb2526101cb06b5ac32129c112a31ece53b600b796ce93e.elf

  • Size

    156KB

  • Sample

    241213-db36jaxrcr

  • MD5

    f4359012c6ba63477c9066e7a91032ee

  • SHA1

    8671ecbbce3837e5a2c85d62b51591d8f1a283bd

  • SHA256

    a1dd96bf0bbdfa8b4bb2526101cb06b5ac32129c112a31ece53b600b796ce93e

  • SHA512

    3f6122cc9d518132c4529cbca7f36fd0aadddc8391ab1a96f1b790a525e28d6ea51548a1b4d82d227bea5eff820b3b81efbb5b10e37944d388db49b50f69d6a0

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBMYn1wpV7q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYn1wpV7MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:606

Targets

    • Target

      a1dd96bf0bbdfa8b4bb2526101cb06b5ac32129c112a31ece53b600b796ce93e.elf

    • Size

      156KB

    • MD5

      f4359012c6ba63477c9066e7a91032ee

    • SHA1

      8671ecbbce3837e5a2c85d62b51591d8f1a283bd

    • SHA256

      a1dd96bf0bbdfa8b4bb2526101cb06b5ac32129c112a31ece53b600b796ce93e

    • SHA512

      3f6122cc9d518132c4529cbca7f36fd0aadddc8391ab1a96f1b790a525e28d6ea51548a1b4d82d227bea5eff820b3b81efbb5b10e37944d388db49b50f69d6a0

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBMYn1wpV7q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYn1wpV7MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks