General

  • Target

    c36beb6ef7cd3ea3608623b028b23f7908a06a381278323b49165c2bae831071.elf

  • Size

    118KB

  • Sample

    241217-e48r6a1ja1

  • MD5

    806675314b77f885b10e45f65ac01a0a

  • SHA1

    5f8ba6376ff3e4ebffe6cdb3c03f1eb8fadd8e3f

  • SHA256

    c36beb6ef7cd3ea3608623b028b23f7908a06a381278323b49165c2bae831071

  • SHA512

    234dbd25a133a850acabb2c5aad9ad090e7a0a8147c42dffe8eb77fd798574f61799f898958d9b11b0b44f8a58618e266fff7860b8fb252eaa3d8bfb7ef86d53

  • SSDEEP

    3072:ekYPUfsgnsb0J2ag/Vf3kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a03kDy+mTQOY5R3cn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.8:12345

Targets

    • Target

      c36beb6ef7cd3ea3608623b028b23f7908a06a381278323b49165c2bae831071.elf

    • Size

      118KB

    • MD5

      806675314b77f885b10e45f65ac01a0a

    • SHA1

      5f8ba6376ff3e4ebffe6cdb3c03f1eb8fadd8e3f

    • SHA256

      c36beb6ef7cd3ea3608623b028b23f7908a06a381278323b49165c2bae831071

    • SHA512

      234dbd25a133a850acabb2c5aad9ad090e7a0a8147c42dffe8eb77fd798574f61799f898958d9b11b0b44f8a58618e266fff7860b8fb252eaa3d8bfb7ef86d53

    • SSDEEP

      3072:ekYPUfsgnsb0J2ag/Vf3kDN0dn+mTQOY5NX3cn:9YPUfsgEo2a03kDy+mTQOY5R3cn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks