General

  • Target

    4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc.elf

  • Size

    136KB

  • Sample

    241215-cpjhls1mgy

  • MD5

    aec5c347a91a8b0469a987741a0fe829

  • SHA1

    706fe8b1c86de3e479e781b4ddf6fb3e7a542655

  • SHA256

    4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc

  • SHA512

    1c222493d918dbbfa769d9b858fa2fe6af271c48bd83350f2a33c6b8b3a1dcaea22d16479f44c0e0bf06fd3af3cf74c5a619b427b66fed5288359c64a5d756eb

  • SSDEEP

    1536:76ejdyUhayRB4pa4ggYJ7vOTlhnxhxPYsXm/KBgvYYiCh:7IyX4pNL7xhx3mCBgAYiCh

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.5:666

Targets

    • Target

      4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc.elf

    • Size

      136KB

    • MD5

      aec5c347a91a8b0469a987741a0fe829

    • SHA1

      706fe8b1c86de3e479e781b4ddf6fb3e7a542655

    • SHA256

      4c0845c2649a27ad310b22244dbe8263cbe4d71a93b6c4121d89a28a78cd36cc

    • SHA512

      1c222493d918dbbfa769d9b858fa2fe6af271c48bd83350f2a33c6b8b3a1dcaea22d16479f44c0e0bf06fd3af3cf74c5a619b427b66fed5288359c64a5d756eb

    • SSDEEP

      1536:76ejdyUhayRB4pa4ggYJ7vOTlhnxhxPYsXm/KBgvYYiCh:7IyX4pNL7xhx3mCBgAYiCh

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks