General

  • Target

    a1458a9cfc95d451dc0d118600fe65ad769b91e3423e45a75df36f787ba4f430.elf

  • Size

    98KB

  • Sample

    241215-ej56jatkds

  • MD5

    a1171feb89d5119f1d262f092ffb15b2

  • SHA1

    493c5ebd8be9c5e5e569af16109fcd57ac076ec2

  • SHA256

    a1458a9cfc95d451dc0d118600fe65ad769b91e3423e45a75df36f787ba4f430

  • SHA512

    96306ef5682994c694ea60c89810ae29189a08ab0feda3c4262ec1fffed9f6fab4501bb390b9d9cfec5c9dce072cf02e793d404128961e4cfdc6f8c9760941f2

  • SSDEEP

    1536:Q9fT9WiC3txvWtfEo5vXJM9wypej++3hZEgL7nLGPTms5TDUMHYr/:Q9jC9wtsOnuejjhZEgL7smITDfHYr/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.5:666

Targets

    • Target

      a1458a9cfc95d451dc0d118600fe65ad769b91e3423e45a75df36f787ba4f430.elf

    • Size

      98KB

    • MD5

      a1171feb89d5119f1d262f092ffb15b2

    • SHA1

      493c5ebd8be9c5e5e569af16109fcd57ac076ec2

    • SHA256

      a1458a9cfc95d451dc0d118600fe65ad769b91e3423e45a75df36f787ba4f430

    • SHA512

      96306ef5682994c694ea60c89810ae29189a08ab0feda3c4262ec1fffed9f6fab4501bb390b9d9cfec5c9dce072cf02e793d404128961e4cfdc6f8c9760941f2

    • SSDEEP

      1536:Q9fT9WiC3txvWtfEo5vXJM9wypej++3hZEgL7nLGPTms5TDUMHYr/:Q9jC9wtsOnuejjhZEgL7smITDfHYr/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks