General

  • Target

    e96c0e739a35ad8ee5afdbc4e53bee183c22108ffa269e0917c50757b4226d5b.elf

  • Size

    156KB

  • Sample

    241213-dmd1sawrbv

  • MD5

    0812c913971b511f42ac23ed34c6819c

  • SHA1

    cf44197e4f73940959c12f4d5573b8175e20fc2d

  • SHA256

    e96c0e739a35ad8ee5afdbc4e53bee183c22108ffa269e0917c50757b4226d5b

  • SHA512

    d0c69d17a6f7db08c07bb8f26dafe1380f759c602bab4531bb2fb7f52b96cab0ff51427c37eb7ae3fc8085cc4d38bbb26fc7af980045e9e0c0ad4b5732a35458

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBMYnYQTxVq3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYnYQTxVMmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:606

Targets

    • Target

      e96c0e739a35ad8ee5afdbc4e53bee183c22108ffa269e0917c50757b4226d5b.elf

    • Size

      156KB

    • MD5

      0812c913971b511f42ac23ed34c6819c

    • SHA1

      cf44197e4f73940959c12f4d5573b8175e20fc2d

    • SHA256

      e96c0e739a35ad8ee5afdbc4e53bee183c22108ffa269e0917c50757b4226d5b

    • SHA512

      d0c69d17a6f7db08c07bb8f26dafe1380f759c602bab4531bb2fb7f52b96cab0ff51427c37eb7ae3fc8085cc4d38bbb26fc7af980045e9e0c0ad4b5732a35458

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBMYnYQTxVq3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYnYQTxVMmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks