General

  • Target

    x86_64.elf

  • Size

    92KB

  • Sample

    241216-nk2deazkfq

  • MD5

    639f1e121c53dc360f9e8df210d6a756

  • SHA1

    2f8ac264718dfcebcbb4c6d7c6919dafc3a8f383

  • SHA256

    cc7f1629cb5427e635b9c0e9f008bc567d307cd870c3b4d26f66e8c0a676e532

  • SHA512

    95cb521e82e663e874678aa450a2e49e8d0c982fc89d036eb8fbaa7e2d1c679a10c0160ef71a82a6002db75af9083da0b09fa002a6d79e32318f3b6df1b21ba3

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3byPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKLifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

150.241.95.250:25565

Targets

    • Target

      x86_64.elf

    • Size

      92KB

    • MD5

      639f1e121c53dc360f9e8df210d6a756

    • SHA1

      2f8ac264718dfcebcbb4c6d7c6919dafc3a8f383

    • SHA256

      cc7f1629cb5427e635b9c0e9f008bc567d307cd870c3b4d26f66e8c0a676e532

    • SHA512

      95cb521e82e663e874678aa450a2e49e8d0c982fc89d036eb8fbaa7e2d1c679a10c0160ef71a82a6002db75af9083da0b09fa002a6d79e32318f3b6df1b21ba3

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3byPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKLifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks