General

  • Target

    1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf

  • Size

    136KB

  • Sample

    241215-cj62qa1lgv

  • MD5

    3bb6aadea62c4f0688c9abbd228da86d

  • SHA1

    c8859b783a434db25f9a44b82a6896b23de07f05

  • SHA256

    1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc

  • SHA512

    8cd78db3e948c816fa888db6f2c391bedbd76bee66d0832f2ee9e75e7f53c979bfbc0f3ed1b6d0a9cce0e5cd8bedb008194ab7fba897887d9e69f14707f47c72

  • SSDEEP

    1536:HHfGlk6Mau3GaXIM2rKbU6Ul5gioHLfPti2dSImNEz7ugf7hoWlNDsorH4hs29NA:+FO3PtiJn8ugN9sazoVmCBgAYiCh

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.5:666

Targets

    • Target

      1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc.elf

    • Size

      136KB

    • MD5

      3bb6aadea62c4f0688c9abbd228da86d

    • SHA1

      c8859b783a434db25f9a44b82a6896b23de07f05

    • SHA256

      1ee538fe93d2a30e6d01c651f504877e5d15ec2caec021bb14caa39d840128bc

    • SHA512

      8cd78db3e948c816fa888db6f2c391bedbd76bee66d0832f2ee9e75e7f53c979bfbc0f3ed1b6d0a9cce0e5cd8bedb008194ab7fba897887d9e69f14707f47c72

    • SSDEEP

      1536:HHfGlk6Mau3GaXIM2rKbU6Ul5gioHLfPti2dSImNEz7ugf7hoWlNDsorH4hs29NA:+FO3PtiJn8ugN9sazoVmCBgAYiCh

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks