General

  • Target

    jackmyarmv6.elf

  • Size

    166KB

  • Sample

    241223-vmze6awjbl

  • MD5

    f8267e8d44d86203d2560d280b66bd36

  • SHA1

    5a1c5e5caeacdf01af8c44bcbe1625b7ad0eb0fb

  • SHA256

    a3360319b5713fa0352e837562c56a8fa34ff656a506763ca7e809d120e57980

  • SHA512

    7b7398311260831b8428e76c46f31297dbfcae42c5c41c87c0644892854b0477406641bd0d5e7af03c7190a8fac38ac0c3cded5341f4f07dbfb974b8275b934e

  • SSDEEP

    3072:pqdR8ML89raonajuog68FiFL85hDnRF6iH3RxmfQOYbr5Wn:0tArayajJFL85htF66xmfQOYbr5Wn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.186.115:4444

Targets

    • Target

      jackmyarmv6.elf

    • Size

      166KB

    • MD5

      f8267e8d44d86203d2560d280b66bd36

    • SHA1

      5a1c5e5caeacdf01af8c44bcbe1625b7ad0eb0fb

    • SHA256

      a3360319b5713fa0352e837562c56a8fa34ff656a506763ca7e809d120e57980

    • SHA512

      7b7398311260831b8428e76c46f31297dbfcae42c5c41c87c0644892854b0477406641bd0d5e7af03c7190a8fac38ac0c3cded5341f4f07dbfb974b8275b934e

    • SSDEEP

      3072:pqdR8ML89raonajuog68FiFL85hDnRF6iH3RxmfQOYbr5Wn:0tArayajJFL85htF66xmfQOYbr5Wn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks