General

  • Target

    a2abfe0fce0928b57960fe83500189e48825efa48bf9340879d9575673b74b4e.elf

  • Size

    146KB

  • Sample

    241215-egx25stjgy

  • MD5

    cfc87728a514a086cc3ff22550d9d652

  • SHA1

    a378fd7831ae75ee988b819f5ef34d9625b9af41

  • SHA256

    a2abfe0fce0928b57960fe83500189e48825efa48bf9340879d9575673b74b4e

  • SHA512

    add6b92d1bf065378e661f5d8f351e55bea181a6faaf861ec0eccf1eb03654d07c2ad4a8a96228efcc6feee1fb34200f2c11e315b0334cd60173c79f93ce72ae

  • SSDEEP

    3072:2tfSVjcVCLJDexaWt8mT17rz0JH/WoHIzmQwfCMQiGW:0fSVjcgLNexa9a17rz0JH/WocmQwfCDU

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.5:666

Targets

    • Target

      a2abfe0fce0928b57960fe83500189e48825efa48bf9340879d9575673b74b4e.elf

    • Size

      146KB

    • MD5

      cfc87728a514a086cc3ff22550d9d652

    • SHA1

      a378fd7831ae75ee988b819f5ef34d9625b9af41

    • SHA256

      a2abfe0fce0928b57960fe83500189e48825efa48bf9340879d9575673b74b4e

    • SHA512

      add6b92d1bf065378e661f5d8f351e55bea181a6faaf861ec0eccf1eb03654d07c2ad4a8a96228efcc6feee1fb34200f2c11e315b0334cd60173c79f93ce72ae

    • SSDEEP

      3072:2tfSVjcVCLJDexaWt8mT17rz0JH/WoHIzmQwfCMQiGW:0fSVjcgLNexa9a17rz0JH/WocmQwfCDU

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks