General

  • Target

    a5a24f796c7204059a62e251c35d67f0e2cd7d591792b65f7b55921261ab163d.elf

  • Size

    155KB

  • Sample

    241214-pjnllatkdq

  • MD5

    301cf3c8fc89ee44d7a40461bbf9bd00

  • SHA1

    6d49ae38398ca9b225c4d2e1a11c160a828313b4

  • SHA256

    a5a24f796c7204059a62e251c35d67f0e2cd7d591792b65f7b55921261ab163d

  • SHA512

    947d7ce4ddde2257df784cb22c7478c869f409bb31ebb9731df7eb37dfbfaa744b3fb29daab15d4c9922d0c5d09f42b50df3a54f9492c20d770cf0116743df1e

  • SSDEEP

    3072:a8L2FlZkCzC2TCX5hGhfmphahpCn38n9VAlZn31mBT38dAY4:Mr1mphabkm6lmBT38dAY4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.73:8778

Targets

    • Target

      a5a24f796c7204059a62e251c35d67f0e2cd7d591792b65f7b55921261ab163d.elf

    • Size

      155KB

    • MD5

      301cf3c8fc89ee44d7a40461bbf9bd00

    • SHA1

      6d49ae38398ca9b225c4d2e1a11c160a828313b4

    • SHA256

      a5a24f796c7204059a62e251c35d67f0e2cd7d591792b65f7b55921261ab163d

    • SHA512

      947d7ce4ddde2257df784cb22c7478c869f409bb31ebb9731df7eb37dfbfaa744b3fb29daab15d4c9922d0c5d09f42b50df3a54f9492c20d770cf0116743df1e

    • SSDEEP

      3072:a8L2FlZkCzC2TCX5hGhfmphahpCn38n9VAlZn31mBT38dAY4:Mr1mphabkm6lmBT38dAY4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks