General

  • Target

    f34ff8da213ac6caeb573f0cd044090e481947215a993027a6ffa231e4074aa1.elf

  • Size

    83KB

  • Sample

    241214-rhg4jawmgr

  • MD5

    9136d8a79000e824890ca5fdd9aeb35e

  • SHA1

    fe4b90f13a00c81805476b9c896f879b6ca84b40

  • SHA256

    f34ff8da213ac6caeb573f0cd044090e481947215a993027a6ffa231e4074aa1

  • SHA512

    f4412f0dcb492dcb791559739185978323fd13114138c885c55d27d8dfd31c5fe47ce09d0469f05a1072b3e1d57321c0d540e398cd77b5012b8238e7148cf818

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8L3wcEvDmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y7wvDmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      f34ff8da213ac6caeb573f0cd044090e481947215a993027a6ffa231e4074aa1.elf

    • Size

      83KB

    • MD5

      9136d8a79000e824890ca5fdd9aeb35e

    • SHA1

      fe4b90f13a00c81805476b9c896f879b6ca84b40

    • SHA256

      f34ff8da213ac6caeb573f0cd044090e481947215a993027a6ffa231e4074aa1

    • SHA512

      f4412f0dcb492dcb791559739185978323fd13114138c885c55d27d8dfd31c5fe47ce09d0469f05a1072b3e1d57321c0d540e398cd77b5012b8238e7148cf818

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8L3wcEvDmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Y7wvDmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks