General

  • Target

    aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf

  • Size

    106KB

  • Sample

    241223-ctme3avkan

  • MD5

    589d6374c72c1721be71a3a5e3de4a09

  • SHA1

    e3dea83cde3691800e8751c9e5d7730761eeec6e

  • SHA256

    aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e

  • SHA512

    473015e18b1c8c70bfaeb4b156df9b4299ef529877eeb329f00cafe34a4c7fd96d83e00e007baa79712d255ea5182da4e74d31ca084de3fa0df55411ae1aa40b

  • SSDEEP

    3072:j6dye4BmJQqphaZw/1vc45AzkSXmdRWaLHgb4:dqphaZcErmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf

    • Size

      106KB

    • MD5

      589d6374c72c1721be71a3a5e3de4a09

    • SHA1

      e3dea83cde3691800e8751c9e5d7730761eeec6e

    • SHA256

      aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e

    • SHA512

      473015e18b1c8c70bfaeb4b156df9b4299ef529877eeb329f00cafe34a4c7fd96d83e00e007baa79712d255ea5182da4e74d31ca084de3fa0df55411ae1aa40b

    • SSDEEP

      3072:j6dye4BmJQqphaZw/1vc45AzkSXmdRWaLHgb4:dqphaZcErmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks