General

  • Target

    e5cdee490bf4c4b3af9e26beec0bcfd4fbf8151891d6dd242da46b49c52fb72e.elf

  • Size

    106KB

  • Sample

    241216-c9ltgazpcw

  • MD5

    7cf71e9950936b1315fc8912f8f72d73

  • SHA1

    468deb612775f426e26d38f8f2b17913bf1c16cf

  • SHA256

    e5cdee490bf4c4b3af9e26beec0bcfd4fbf8151891d6dd242da46b49c52fb72e

  • SHA512

    c61fbf1775ddf60ea90a4de9b53f4b62d3667c3dcd06a7a72e69a974d32aa54ee4ad52029551cdc014a398805aa2cf51f5d8430beaabf74019ee87701101ae3b

  • SSDEEP

    3072:j6dye4BmJQwphaZw/1vc4+AzkSXmdRWaLHgb4:dwphaZchrmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.34:4258

Targets

    • Target

      e5cdee490bf4c4b3af9e26beec0bcfd4fbf8151891d6dd242da46b49c52fb72e.elf

    • Size

      106KB

    • MD5

      7cf71e9950936b1315fc8912f8f72d73

    • SHA1

      468deb612775f426e26d38f8f2b17913bf1c16cf

    • SHA256

      e5cdee490bf4c4b3af9e26beec0bcfd4fbf8151891d6dd242da46b49c52fb72e

    • SHA512

      c61fbf1775ddf60ea90a4de9b53f4b62d3667c3dcd06a7a72e69a974d32aa54ee4ad52029551cdc014a398805aa2cf51f5d8430beaabf74019ee87701101ae3b

    • SSDEEP

      3072:j6dye4BmJQwphaZw/1vc4+AzkSXmdRWaLHgb4:dwphaZchrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks