Overview

overview

10

Static

static

10

efe3c8479a...a4.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f2fc84aaca4a36a82e47644ba42eca7.bin

  • Size

    42KB

  • Sample

    241215-bdhaqs1nap

  • MD5

    412d7967504cc305e40be1654b863891

  • SHA1

    b1e10a0b450af37c0960fbaf8f387dd6b60af963

  • SHA256

    5d27f052c6c95db2b9a8c364df7bbb6bd7e08c8e5d723cf9ce5c9e93366ae280

  • SHA512

    6f4deb1efa5cd2b0ea7bb591acfa53a4c816502e846f18db03f9b7508ca65225b9b0d3c3dc0bee17c45401838b7feda7172dee79b917a255bd75d07102aa1af6

  • SSDEEP

    768:aRItD83VdrC9f/zQC68q8ciOzm4HeRgbLqZ6SFOr+DQ53wiPiKaqF+10X41QGhMC:rtoypLQ+qlVm4Hj/e6QOyDs3PPiKhe08

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      efe3c8479a896293c9265ed94c62fdeec9dbd0da6d3ed2155bec9243cdb493a4.elf

    • Size

      123KB

    • MD5

      0f2fc84aaca4a36a82e47644ba42eca7

    • SHA1

      f4f1651657867f88c6712157eaf76507273090ea

    • SHA256

      efe3c8479a896293c9265ed94c62fdeec9dbd0da6d3ed2155bec9243cdb493a4

    • SHA512

      79805a45833865b86c45166234db3734cb8facaa944fe58b953810e653d65f06546ab4aa8072ff10f87c800b8b9e02b89fca2c4fc26545479c0c70d0458ac698

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBenEd5jFeagrmW+i:Ted0W0MZQH3d5BeagrmW+IFB1Dt1hR/

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks