Overview

overview

10

Static

static

10

b4b37a109a...49.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b546c86f1e454f263b50eb54f2181b19.bin

  • Size

    42KB

  • Sample

    241224-b6ckysylgm

  • MD5

    9df6ca0f0a1a525a8dcfd097a63575cd

  • SHA1

    dc6160357cf0bd60ef77dfa909411be2340c2e59

  • SHA256

    1aac74b25fb07a880f68a3adfb4a240ca2f38cfe98ce09e5c7ce5daf8d14cd01

  • SHA512

    f49f929c0f09dccb547987043a84c917a4c25a919df0244f6bf3ded407d477b4e1d966cd0c287e449888608797f44b6b0f3144689116ed18a13114264f8e8618

  • SSDEEP

    768:7UMrenmrki/fi8346Ju1x8D/ALFJfS+vZMoyUsm7/2WPCdp:7gsB/683466pFBt+oPsm7pIp

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649.elf

    • Size

      112KB

    • MD5

      b546c86f1e454f263b50eb54f2181b19

    • SHA1

      6f99d484e52cc9e82f8ebdef1109db4666cb1577

    • SHA256

      b4b37a109a2773e15f18aa7930242a386e219e156cc06cfffefb5b2d08bd5649

    • SHA512

      de3a5a95a1437cdce4bbc614c72dbc4b81b3ca53be6fd7e7fa3d3bbbca0f7e369ed5cd104109777c086e4b085467976ab1da5402cd0bd76c7012fb248cc51085

    • SSDEEP

      3072:7rfMt6MUEproqS5hY1zVKdwwzF9GhsRiAe:3vMzproqS5hYNVKdwwzF9GhsRiAe

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks