General

  • Target

    7c8d83a2a40b3bb8f1bab956ac57a8eba1d4d119ca28a83fb5a53ca51afc2fd3.elf

  • Size

    204KB

  • Sample

    241214-n2z7ns1khx

  • MD5

    dda182a45be867bafe352903fb903f42

  • SHA1

    4268470e21c066846cb9a40bbe40d9b391b8a385

  • SHA256

    7c8d83a2a40b3bb8f1bab956ac57a8eba1d4d119ca28a83fb5a53ca51afc2fd3

  • SHA512

    0844dabb570ad864afbf81e671d438480f42d5efdf68f8e4b209b9d7237d2f4e3715a180bd5c110bbb632092854442f998d533084f2c51bf8c3c0fd5a2814150

  • SSDEEP

    6144:VNfeaUiwXi0MtA0ef5hgu6K2axVPx2m0wfB5RyAn:VNfeaUiwXi0jf5hg/yb2m0mB5RyAn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.73:8778

Targets

    • Target

      7c8d83a2a40b3bb8f1bab956ac57a8eba1d4d119ca28a83fb5a53ca51afc2fd3.elf

    • Size

      204KB

    • MD5

      dda182a45be867bafe352903fb903f42

    • SHA1

      4268470e21c066846cb9a40bbe40d9b391b8a385

    • SHA256

      7c8d83a2a40b3bb8f1bab956ac57a8eba1d4d119ca28a83fb5a53ca51afc2fd3

    • SHA512

      0844dabb570ad864afbf81e671d438480f42d5efdf68f8e4b209b9d7237d2f4e3715a180bd5c110bbb632092854442f998d533084f2c51bf8c3c0fd5a2814150

    • SSDEEP

      6144:VNfeaUiwXi0MtA0ef5hgu6K2axVPx2m0wfB5RyAn:VNfeaUiwXi0jf5hg/yb2m0mB5RyAn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks