General

  • Target

    09b99672d1b842a3bd7e7fc51fc09789bf56bcd54866ff6062f97652cec151ed.elf

  • Size

    156KB

  • Sample

    241217-chv8tsxrbj

  • MD5

    0cc9539ef911c01a4ceb97771beba890

  • SHA1

    103769239f5f397fd1499ad0930470fec5b9e5b4

  • SHA256

    09b99672d1b842a3bd7e7fc51fc09789bf56bcd54866ff6062f97652cec151ed

  • SHA512

    8e16e9c300f3785fe9c9894a90572e1ca15980d74ac852361a6e835bbfa73a462a597b1f2a36c79e723e1a4c412b2186b3d80bdba2baf76bd838c4392a14c837

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBQYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/KYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.8:12345

Targets

    • Target

      09b99672d1b842a3bd7e7fc51fc09789bf56bcd54866ff6062f97652cec151ed.elf

    • Size

      156KB

    • MD5

      0cc9539ef911c01a4ceb97771beba890

    • SHA1

      103769239f5f397fd1499ad0930470fec5b9e5b4

    • SHA256

      09b99672d1b842a3bd7e7fc51fc09789bf56bcd54866ff6062f97652cec151ed

    • SHA512

      8e16e9c300f3785fe9c9894a90572e1ca15980d74ac852361a6e835bbfa73a462a597b1f2a36c79e723e1a4c412b2186b3d80bdba2baf76bd838c4392a14c837

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBQYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/KYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks