Overview

overview

10

Static

static

10

412dfa6621...37.elf

debian-9-mips

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2f2e318660621d3770d1f55789199d5.bin

  • Size

    53KB

  • Sample

    241224-b2xekaxrdt

  • MD5

    72411369ae82081c0565bada472775f2

  • SHA1

    6192609721c54312e22b5bd66ed3b991f29b9aeb

  • SHA256

    d0d8456e22eeb675bce49dac8d10d8d4034d6f9da216c733e480bcf9d909b2c5

  • SHA512

    5deaf60a16952d358a7bafd84859ad6fa4fd78803e1ea0e777c55e4218b3bfbb33f16929fbb79d2e81a311fc97ee5e5b053428a0ce50b46e84c903cf075695ec

  • SSDEEP

    1536:NnWEdeW4GqfoVqfeCUrtN/e94HKaXV0QJ:NreFf251JN/e+HJXV0QJ

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537.elf

    • Size

      141KB

    • MD5

      a2f2e318660621d3770d1f55789199d5

    • SHA1

      46c7c72f1eb438259c5c0d2c74a9ecbd4070578e

    • SHA256

      412dfa6621f9156ace7e40661d5a8d2c60451592f297037730ae00b359923537

    • SHA512

      e322837fdb04deb162adb2bf91f99c49e61b08081f7616974a55920db75bd1e08b175ecfee96d0f9dc26d75dce20ccde6b33c14fe0823dd1d16edc1c5d441e7b

    • SSDEEP

      3072:sGGNZfCos2pA4FCV5hvikTam0/5ApYADn:hACyK40V5hvi9m0/5ASADn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks