General

  • Target

    e91d5978eecbb4e784d5df0246fa52aa325824ba607c10646fb564a884ade6c7.elf

  • Size

    156KB

  • Sample

    241213-dqv4gaxjdw

  • MD5

    45c0470910e4af782603ada2611f4d0f

  • SHA1

    f27372d825bb090fd0d968a9a79d7b24abceaba4

  • SHA256

    e91d5978eecbb4e784d5df0246fa52aa325824ba607c10646fb564a884ade6c7

  • SHA512

    feee6d4f3d9a8560f37261c4242fb70f12064a8fd1438a93416d2074bd2130681ae609900196f3de853cf25a3ba53c8e8c3c6d329a6d6128465276521187d027

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBMYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.177.25.107:606

Targets

    • Target

      e91d5978eecbb4e784d5df0246fa52aa325824ba607c10646fb564a884ade6c7.elf

    • Size

      156KB

    • MD5

      45c0470910e4af782603ada2611f4d0f

    • SHA1

      f27372d825bb090fd0d968a9a79d7b24abceaba4

    • SHA256

      e91d5978eecbb4e784d5df0246fa52aa325824ba607c10646fb564a884ade6c7

    • SHA512

      feee6d4f3d9a8560f37261c4242fb70f12064a8fd1438a93416d2074bd2130681ae609900196f3de853cf25a3ba53c8e8c3c6d329a6d6128465276521187d027

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBMYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/iYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks