Overview

overview

10

Static

static

10

i586.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    i586.elf

  • Size

    79KB

  • Sample

    241216-ng5xeszjdp

  • MD5

    d411fabea60f58d93fad5fdc878d8509

  • SHA1

    44e23558d2b7f7ea8412c41069605bb0b1b957a5

  • SHA256

    f2f8cea3d74052a1af34ee0b5fe6f513444083a55d8ccb439abcb92adfb3bd15

  • SHA512

    75e529e5e5015504bac894647e2fa0789081c867678987595a9f88c024d2fc09682e1dc9ff061dd19f34e940d922b6207ee427dc14ac57fa1acc9df38891ac03

  • SSDEEP

    1536:v/Eo67moXD972+c6tsTngPE56XxCSn9Qgvjtg0md+wVOz+sXcfW7k:v/EzXz97hc6G7gzXxxGEmMwVOz+ucfWQ

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

150.241.88.132:25565

Targets

    • Target

      i586.elf

    • Size

      79KB

    • MD5

      d411fabea60f58d93fad5fdc878d8509

    • SHA1

      44e23558d2b7f7ea8412c41069605bb0b1b957a5

    • SHA256

      f2f8cea3d74052a1af34ee0b5fe6f513444083a55d8ccb439abcb92adfb3bd15

    • SHA512

      75e529e5e5015504bac894647e2fa0789081c867678987595a9f88c024d2fc09682e1dc9ff061dd19f34e940d922b6207ee427dc14ac57fa1acc9df38891ac03

    • SSDEEP

      1536:v/Eo67moXD972+c6tsTngPE56XxCSn9Qgvjtg0md+wVOz+sXcfW7k:v/EzXz97hc6G7gzXxxGEmMwVOz+ucfWQ

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks