General

  • Target

    f4e4ec698146a29e6a4dea6caee872a7.bin

  • Size

    67KB

  • Sample

    241215-cbjw8a1jey

  • MD5

    77a4078b286c1c3c3e673a6ce18285f9

  • SHA1

    23e7ba46bc73681a881daba07c627f264dcaf729

  • SHA256

    0d0226771c3e82d68831e6924f133ae9b4ee225d3bd1c60366405bb8e4069516

  • SHA512

    959786b5ae9632f79e7bc3ecb1ba5d70496e7e90606fe986653aa325bbc38b2e44d7ba063cef2315c9ea41dc145003c344ec44d25b3cf5346d61752de541bb11

  • SSDEEP

    1536:C+LQUwo2BWoNUU+EEEocaq02LGFU1f3ps4QsbSeN4s1jglfHzz:Cto2T+EJocaq026FGf3pVQsbSyGHzz

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.62:1865

Targets

    • Target

      a89e13562d26a569447d231492f82707463ccaa00b09a54668889ac35b61f1d8.elf

    • Size

      156KB

    • MD5

      f4e4ec698146a29e6a4dea6caee872a7

    • SHA1

      cc9116b147db92b9f688ac91348646d14ec300b9

    • SHA256

      a89e13562d26a569447d231492f82707463ccaa00b09a54668889ac35b61f1d8

    • SHA512

      2ccd22886ca48c407a35046082b653a16a1e7df3ffe23028a10a82a1bf758681cfc8effc3a8ab9b8d4012aed30d5c9c13148540baf0156333c635fad8d03d21e

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBGYnyLRM/9pSQomFwfBxKQodn:hg2hNNlzIkk/MOa/UYnydM/9LomFwfBC

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks