General

  • Target

    ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf

  • Size

    141KB

  • Sample

    241223-ct72rsvkbq

  • MD5

    10f27b73c98a7e959c9c03f516440d93

  • SHA1

    e777e3799da3bb11a3f4dd0943b6b886c9502f96

  • SHA256

    ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0

  • SHA512

    a0776eb1b67153e8a7792f41fdc4971c9c6f2dadafaaccbbe1c990f5dd8446294c9ab12ba320731c4abbcc40006662cfaecee9f24ea1295abddddede6e7fb071

  • SSDEEP

    3072:lBXpqf9VHGn7vsN5htpRvHpVFm0/5ApYADn:llp4WvsN5htvp7m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf

    • Size

      141KB

    • MD5

      10f27b73c98a7e959c9c03f516440d93

    • SHA1

      e777e3799da3bb11a3f4dd0943b6b886c9502f96

    • SHA256

      ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0

    • SHA512

      a0776eb1b67153e8a7792f41fdc4971c9c6f2dadafaaccbbe1c990f5dd8446294c9ab12ba320731c4abbcc40006662cfaecee9f24ea1295abddddede6e7fb071

    • SSDEEP

      3072:lBXpqf9VHGn7vsN5htpRvHpVFm0/5ApYADn:llp4WvsN5htvp7m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks