General

  • Target

    b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf

  • Size

    112KB

  • Sample

    241223-crb7bavjdm

  • MD5

    b546c86f1e454f263b50eb54f2181b19

  • SHA1

    6f99d484e52cc9e82f8ebdef1109db4666cb1577

  • SHA256

    b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649

  • SHA512

    de3a5a95a1437cdce4bbc614c72dbc4b81b3ca53be6fd7e7fa3d3bbbca0f7e369ed5cd104109777c086e4b085467976ab1da5402cd0bd76c7012fb248cc51085

  • SSDEEP

    3072:7rfMt6MUEproqS5hY1zVKdwwzF9GhsRiAe:3vMzproqS5hYNVKdwwzF9GhsRiAe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf

    • Size

      112KB

    • MD5

      b546c86f1e454f263b50eb54f2181b19

    • SHA1

      6f99d484e52cc9e82f8ebdef1109db4666cb1577

    • SHA256

      b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649

    • SHA512

      de3a5a95a1437cdce4bbc614c72dbc4b81b3ca53be6fd7e7fa3d3bbbca0f7e369ed5cd104109777c086e4b085467976ab1da5402cd0bd76c7012fb248cc51085

    • SSDEEP

      3072:7rfMt6MUEproqS5hY1zVKdwwzF9GhsRiAe:3vMzproqS5hYNVKdwwzF9GhsRiAe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks