General

  • Target

    11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf

  • Size

    92KB

  • Sample

    241214-cl6tqsvkcn

  • MD5

    c5f57160a1e62fedc1906e8f080d94f0

  • SHA1

    56505da441ef10f038418676c225ca923366fa8a

  • SHA256

    11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0

  • SHA512

    67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf

    • Size

      92KB

    • MD5

      c5f57160a1e62fedc1906e8f080d94f0

    • SHA1

      56505da441ef10f038418676c225ca923366fa8a

    • SHA256

      11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0

    • SHA512

      67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks