General

  • Target

    ccfcbfce78813566dc7cafe03589eae3280d9c53cbeb8e5efec81721e3204943.elf

  • Size

    139KB

  • Sample

    241214-qvptgavqbr

  • MD5

    a58bde2e05871079f85b4f3472379d10

  • SHA1

    91fa11d158f3c958e83fd59963088e60cb1c5c8f

  • SHA256

    ccfcbfce78813566dc7cafe03589eae3280d9c53cbeb8e5efec81721e3204943

  • SHA512

    a77f3401aab8f75693a3bf7c1c383bb8d1c3b0d5fa4f297bfbc23dc7213764ebe622e670b0827d8c9ea56d580c8aa25fb7460af31441c6b8139a51030ac84c80

  • SSDEEP

    3072:yclx0/BSuUiFZPSwwSOyMzR5h6NJeX0mJswdytNr9:y3zbPGzR5hU7mJswdytNr9

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.73:8778

Targets

    • Target

      ccfcbfce78813566dc7cafe03589eae3280d9c53cbeb8e5efec81721e3204943.elf

    • Size

      139KB

    • MD5

      a58bde2e05871079f85b4f3472379d10

    • SHA1

      91fa11d158f3c958e83fd59963088e60cb1c5c8f

    • SHA256

      ccfcbfce78813566dc7cafe03589eae3280d9c53cbeb8e5efec81721e3204943

    • SHA512

      a77f3401aab8f75693a3bf7c1c383bb8d1c3b0d5fa4f297bfbc23dc7213764ebe622e670b0827d8c9ea56d580c8aa25fb7460af31441c6b8139a51030ac84c80

    • SSDEEP

      3072:yclx0/BSuUiFZPSwwSOyMzR5h6NJeX0mJswdytNr9:y3zbPGzR5hU7mJswdytNr9

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks