General

  • Target

    jackmyarmv5.elf

  • Size

    166KB

  • Sample

    241223-vp4snawjen

  • MD5

    795d887687193140ee04711c54574ab5

  • SHA1

    35ac21f15d9be9c9da1b22acefefbf466ad154f4

  • SHA256

    f25d5d4a126acb25c26694b0d37455b757f6607a9bc33ee4a71f50b5506292a5

  • SHA512

    5c687bcb950fae7738c4b65f67a0612f1f86338b92867deb1611b9483dfbc04b202edd158a9108be5d55350b717a64922050965e48907ff8066542eb4534c614

  • SSDEEP

    3072:pqdR8ML89raonajuog68FiFL85hDnRF6/H3oxmfQOYbr5Wn:0tArayajJFL85htF6wxmfQOYbr5Wn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.186.115:4444

Targets

    • Target

      jackmyarmv5.elf

    • Size

      166KB

    • MD5

      795d887687193140ee04711c54574ab5

    • SHA1

      35ac21f15d9be9c9da1b22acefefbf466ad154f4

    • SHA256

      f25d5d4a126acb25c26694b0d37455b757f6607a9bc33ee4a71f50b5506292a5

    • SHA512

      5c687bcb950fae7738c4b65f67a0612f1f86338b92867deb1611b9483dfbc04b202edd158a9108be5d55350b717a64922050965e48907ff8066542eb4534c614

    • SSDEEP

      3072:pqdR8ML89raonajuog68FiFL85hDnRF6/H3oxmfQOYbr5Wn:0tArayajJFL85htF6wxmfQOYbr5Wn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks