General

  • Target

    f1bd061af699e21be35d9dd3d873f93e5eea01085fb9cc90684d5657936ecf75.elf

  • Size

    209KB

  • Sample

    241214-rj18ssvjhw

  • MD5

    419aade96c12dfea0260ba505fb31b5b

  • SHA1

    564e5f24382c87b24e0d2fb6e2705ecc6f29fd60

  • SHA256

    f1bd061af699e21be35d9dd3d873f93e5eea01085fb9cc90684d5657936ecf75

  • SHA512

    a1467a609d96c4845e7a18fc7c7da629c6eb8c98ea42c510bf822034e4f16b9a2e3c4fc731ef5e581b35194a3417dceffcbde5b56baf23b0f290f69ed981cbe6

  • SSDEEP

    3072:3XC9j6w2ZQgoYJlQelShPb+iSWhvJ6CeWRd9soUQcI7s5h2Bk1cmrpy6n9Nn:3SnfTcI7s5h21mrpy6n9Nn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.73:8778

Targets

    • Target

      f1bd061af699e21be35d9dd3d873f93e5eea01085fb9cc90684d5657936ecf75.elf

    • Size

      209KB

    • MD5

      419aade96c12dfea0260ba505fb31b5b

    • SHA1

      564e5f24382c87b24e0d2fb6e2705ecc6f29fd60

    • SHA256

      f1bd061af699e21be35d9dd3d873f93e5eea01085fb9cc90684d5657936ecf75

    • SHA512

      a1467a609d96c4845e7a18fc7c7da629c6eb8c98ea42c510bf822034e4f16b9a2e3c4fc731ef5e581b35194a3417dceffcbde5b56baf23b0f290f69ed981cbe6

    • SSDEEP

      3072:3XC9j6w2ZQgoYJlQelShPb+iSWhvJ6CeWRd9soUQcI7s5h2Bk1cmrpy6n9Nn:3SnfTcI7s5h21mrpy6n9Nn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks