General

  • Target

    ffa5146ffa217aa42b4f38d3d8b000d50c4f43328a8257a5514abf53a51631c2.elf

  • Size

    118KB

  • Sample

    241214-rkqtfswnel

  • MD5

    2521efbff8e8a6bdcdb1eaab862c4835

  • SHA1

    6ea045054f9fd8799f7cddd2ef05729baab46531

  • SHA256

    ffa5146ffa217aa42b4f38d3d8b000d50c4f43328a8257a5514abf53a51631c2

  • SHA512

    22f5158fbced71f61ef9b6e75564b8633f58dcc09d78535c8bee01b982e0561c24672c29ca10e2cd8beed2d10a7ad237a2839530b998b826146dd44df042e556

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/VfVkDuuN4g+mTQOY5NX3cn:9YPUfsgEo2a0VkDuxg+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      ffa5146ffa217aa42b4f38d3d8b000d50c4f43328a8257a5514abf53a51631c2.elf

    • Size

      118KB

    • MD5

      2521efbff8e8a6bdcdb1eaab862c4835

    • SHA1

      6ea045054f9fd8799f7cddd2ef05729baab46531

    • SHA256

      ffa5146ffa217aa42b4f38d3d8b000d50c4f43328a8257a5514abf53a51631c2

    • SHA512

      22f5158fbced71f61ef9b6e75564b8633f58dcc09d78535c8bee01b982e0561c24672c29ca10e2cd8beed2d10a7ad237a2839530b998b826146dd44df042e556

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/VfVkDuuN4g+mTQOY5NX3cn:9YPUfsgEo2a0VkDuxg+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks