General

  • Target

    pXdN91.armv6l.elf

  • Size

    125KB

  • Sample

    241216-2dpb6asjct

  • MD5

    34facf1d5cef4bffe45dc5eaf20ba4d5

  • SHA1

    862e61de4af9978225669232722d7a5ffb0743b4

  • SHA256

    bbe2c1f31aa0ccf3cc883d90420c83f2b3d4966b4a8bfa15f39dd18917ab6f49

  • SHA512

    4e1896de1aee9c452b6b06e7c7da15df037f6ddb72485e6f73dbaeb6b9073fe24377fd32e7471300b19f555a58cca00f16012a0ac97678d31a53a68d62ef5715

  • SSDEEP

    3072:pg1Na9+vMPbLjgOIiY2R3uY+PZVmkQBWzXvb8:cNa8vMRIiY2R3u9ZVmkQBWzvb8

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.187.14:13387

Targets

    • Target

      pXdN91.armv6l.elf

    • Size

      125KB

    • MD5

      34facf1d5cef4bffe45dc5eaf20ba4d5

    • SHA1

      862e61de4af9978225669232722d7a5ffb0743b4

    • SHA256

      bbe2c1f31aa0ccf3cc883d90420c83f2b3d4966b4a8bfa15f39dd18917ab6f49

    • SHA512

      4e1896de1aee9c452b6b06e7c7da15df037f6ddb72485e6f73dbaeb6b9073fe24377fd32e7471300b19f555a58cca00f16012a0ac97678d31a53a68d62ef5715

    • SSDEEP

      3072:pg1Na9+vMPbLjgOIiY2R3uY+PZVmkQBWzXvb8:cNa8vMRIiY2R3u9ZVmkQBWzvb8

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks