General

  • Target

    31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126.elf

  • Size

    105KB

  • Sample

    241214-dntsmavmep

  • MD5

    5a3daf6d91a0fb5561eedddf1611612f

  • SHA1

    2971d15edca4bc23ccd8fd46fd7e520b3553669b

  • SHA256

    31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126

  • SHA512

    c7b4bef4bc4a9af653ffe6c89474a17f9779928af1f3131e290845aa02127f8b49461f32e9a87e90fb4af885cf37de0c42f78d9c85f54a45b5f95ae7e0940ccb

  • SSDEEP

    3072:MSY+46m1qOzssBFPueFhkPmkZrQAhPDCXFke:06mgOzJBFPJEmkZrQAhPDCXFke

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126.elf

    • Size

      105KB

    • MD5

      5a3daf6d91a0fb5561eedddf1611612f

    • SHA1

      2971d15edca4bc23ccd8fd46fd7e520b3553669b

    • SHA256

      31aeb62e67fd28e19805012565e3b78b95974a8f39d5b627ac00737029ed1126

    • SHA512

      c7b4bef4bc4a9af653ffe6c89474a17f9779928af1f3131e290845aa02127f8b49461f32e9a87e90fb4af885cf37de0c42f78d9c85f54a45b5f95ae7e0940ccb

    • SSDEEP

      3072:MSY+46m1qOzssBFPueFhkPmkZrQAhPDCXFke:06mgOzJBFPJEmkZrQAhPDCXFke

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks