Overview

overview

10

Static

static

10

ddb6cc0c77...d0.elf

debian-9-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10f27b73c98a7e959c9c03f516440d93.bin

  • Size

    52KB

  • Sample

    241224-bc3kaaxkct

  • MD5

    d5d3c7cb2036b433cf9cea13366e97a0

  • SHA1

    aba10212cd7e95b55a9cd57436a6c39a953b3275

  • SHA256

    c8519c7b8f005bc7c49e7da4e13c045c769a0a1ac84b1ba095788531d1536907

  • SHA512

    52cec09f3de014b108bc153591e6e632aa0048dd5889b025c981aec1cfeb19c9ba927513203dfbf247c86f5b3b42f5775f1a7a78880d2d7097a79025386bd5c3

  • SSDEEP

    1536:dUENZC6xa77UBXzrbUkw3m7nG2zTG7cLgp00pjk0TgV//jZ1MH:dpNZCmWE3bU3WGUGggp/k00B/DMH

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0.elf

    • Size

      141KB

    • MD5

      10f27b73c98a7e959c9c03f516440d93

    • SHA1

      e777e3799da3bb11a3f4dd0943b6b886c9502f96

    • SHA256

      ddb6cc0c77f8c72bb52f7ff1390dc152327bcf00defbdb1c88a0dd9ed2e9a8d0

    • SHA512

      a0776eb1b67153e8a7792f41fdc4971c9c6f2dadafaaccbbe1c990f5dd8446294c9ab12ba320731c4abbcc40006662cfaecee9f24ea1295abddddede6e7fb071

    • SSDEEP

      3072:lBXpqf9VHGn7vsN5htpRvHpVFm0/5ApYADn:llp4WvsN5htvp7m0/5ASADn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks