General

  • Target

    8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347.elf

  • Size

    150KB

  • Sample

    241223-cpzvlatqaw

  • MD5

    a844f98dc6cd73706a8ee8378a2bd9ed

  • SHA1

    719c8825ab30ee3344263b85155f749574e9df8e

  • SHA256

    8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347

  • SHA512

    0c02a541dd089d36ec783bfbdaf5c9ceed84d82a893953bbaa015c314c8569ebe54da0ffe428fd402822e69fd497c2a471bae94b3a99bb8ca4c2cfd763280784

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAp5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTk5hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347.elf

    • Size

      150KB

    • MD5

      a844f98dc6cd73706a8ee8378a2bd9ed

    • SHA1

      719c8825ab30ee3344263b85155f749574e9df8e

    • SHA256

      8daebf6b1ab5367a0e76c4f85f93b40b26fa26382b4231f187c3e2b241a7d347

    • SHA512

      0c02a541dd089d36ec783bfbdaf5c9ceed84d82a893953bbaa015c314c8569ebe54da0ffe428fd402822e69fd497c2a471bae94b3a99bb8ca4c2cfd763280784

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAp5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTk5hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks