General

  • Target

    252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842.elf

  • Size

    83KB

  • Sample

    241217-cxkqmsxnet

  • MD5

    727ccd2f0f69eaa2f5d6914f9b3db4b2

  • SHA1

    db3835960551669551cac54373ab38653c17df9a

  • SHA256

    252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842

  • SHA512

    cd311b2793301fb29d3849297242d9a8037fb28a2dd00bff5f4c1c6ddd488bb5b72af973ebfcf81bcff6f8780fe57d7aae4552b1a7096d6f99be723fc0f18c12

  • SSDEEP

    1536:W35b9Vc4N3J6lreu5r4hWj8L5WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Yl2oRmEwVOz+ucfW7k

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.8:12345

Targets

    • Target

      252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842.elf

    • Size

      83KB

    • MD5

      727ccd2f0f69eaa2f5d6914f9b3db4b2

    • SHA1

      db3835960551669551cac54373ab38653c17df9a

    • SHA256

      252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842

    • SHA512

      cd311b2793301fb29d3849297242d9a8037fb28a2dd00bff5f4c1c6ddd488bb5b72af973ebfcf81bcff6f8780fe57d7aae4552b1a7096d6f99be723fc0f18c12

    • SSDEEP

      1536:W35b9Vc4N3J6lreu5r4hWj8L5WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Yl2oRmEwVOz+ucfW7k

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks