General

  • Target

    4f1944d6745fd25b4b6db9a7c805fb0291bbb46d8d390ef5c730eaf68f8a3942.elf

  • Size

    141KB

  • Sample

    241216-cpw4psymhw

  • MD5

    d63350177f707123eda7f74642e4f18b

  • SHA1

    60dc97473ed4f3e0856496c0ebac4d0ae15c6bad

  • SHA256

    4f1944d6745fd25b4b6db9a7c805fb0291bbb46d8d390ef5c730eaf68f8a3942

  • SHA512

    0d1adf128c121f5a670bb9460ac9772f77865a160833f6e0e30e593bca26af7e562257a6bb4340d904900f0cc977d463e54083771713a3729740290ebfcd1961

  • SSDEEP

    3072:lBXpqf9VHGn7vs35htpRvHpVFm0/5ApYADn:llp4Wvs35htvp7m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

166.88.225.34:4258

Targets

    • Target

      4f1944d6745fd25b4b6db9a7c805fb0291bbb46d8d390ef5c730eaf68f8a3942.elf

    • Size

      141KB

    • MD5

      d63350177f707123eda7f74642e4f18b

    • SHA1

      60dc97473ed4f3e0856496c0ebac4d0ae15c6bad

    • SHA256

      4f1944d6745fd25b4b6db9a7c805fb0291bbb46d8d390ef5c730eaf68f8a3942

    • SHA512

      0d1adf128c121f5a670bb9460ac9772f77865a160833f6e0e30e593bca26af7e562257a6bb4340d904900f0cc977d463e54083771713a3729740290ebfcd1961

    • SSDEEP

      3072:lBXpqf9VHGn7vs35htpRvHpVFm0/5ApYADn:llp4Wvs35htvp7m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks