General

  • Target

    0b9c50ac49e202f06421ab0bb325468e.bin

  • Size

    49KB

  • Sample

    241224-bct8xaxkby

  • MD5

    5fbf5eaa7cf970fbc17808fad3e3fdc5

  • SHA1

    ef840a934753d583023fe4925cda70a0811c58d2

  • SHA256

    8a284897e6dcd3106c3d3b72003483c5744635ad2073736159928e59c317102c

  • SHA512

    64659d06292ed177ee4c91157c075b332167ebc4d87d36c742cc330ea51b4c7562e411b1684ea804670331c1e9aeebb2ecfae345699fa2348c6ff879ba38f136

  • SSDEEP

    768:vnfvETxtZmuL5tai+e4NJgLsHJjiktx0IgJxwlX8MNJb7OBLWTvnwbw42qaCEiTY:vnwtZmuLfacorFuTwlsMMLI0V2VVv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f.elf

    • Size

      112KB

    • MD5

      0b9c50ac49e202f06421ab0bb325468e

    • SHA1

      3c3e2fa064f80ef9a9a5580abc747764c2950872

    • SHA256

      96967c1b1aec4bb2e45047e0fab0d3d793a502630a112a6dd7e1ad6d4ceabe5f

    • SHA512

      b6c5fb6a6a5ce7b8575db7b78d26cd24cfa9e3f66a6a0760c5442a5f6422432aec1ca5e79cc121b8a14303ccdaea1fd1aca9378297c3507157ababc90ddee05e

    • SSDEEP

      3072:vhfviOui5FCRSUaVejY68tu5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtu5hqSr3hGm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks