Overview

overview

10

Static

static

10

11006e12b1...d0.elf

ubuntu-22.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5f57160a1e62fedc1906e8f080d94f0.bin

  • Size

    41KB

  • Sample

    241215-b7cbksslhp

  • MD5

    55301fcdf3d041d8ee2c347f1b663055

  • SHA1

    90c6938b853e510b6c89d339d640235fc78c3100

  • SHA256

    7fd2556484237ebe9ee6bc57119cf0c8831eb9349b242a7aa74bf784aa17512b

  • SHA512

    ab07b81a0112aac974126b3cd3a10f19f28c150ab2a705ebf1d7a3783e7d4744cc2da452a94df00bb8e938f73be6b20c745ca29b78db1a727b8fdc4fa4579cbd

  • SSDEEP

    768:WyKZwP8Td+W/QyOnku0Xnm1FXZB/dJBa7hMGog64lGBdVKSZbDQijb:iwAd+W/FOnBeYFp/EWgVkBdHFQiv

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0.elf

    • Size

      92KB

    • MD5

      c5f57160a1e62fedc1906e8f080d94f0

    • SHA1

      56505da441ef10f038418676c225ca923366fa8a

    • SHA256

      11006e12b11f9855795c44b328bd2dbcb75f12e0eab84f04f7d16b5996e857d0

    • SHA512

      67c2633a1729c02e9a6431d5c6e831f7621e560d00a7add8c2d7e8fba91e8aa99df90ac6f6c1f67ef70499fe2aded61c7b7521120fbbac2b15f5816ebacab2e0

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3sMtukmA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjK8Mvm/KWOXF7Y

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks