Overview

overview

10

Static

static

10

fb8bddbc58...94.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    426bfa9b1f8bf6a028d2f5a7a09176a0.bin

  • Size

    43KB

  • Sample

    241224-bg25baxneq

  • MD5

    04f57cb317d707fb4be3569ff81f436b

  • SHA1

    94cc85de71fe41f75c00814de01c8b0ed10a2dfc

  • SHA256

    1f2576d269420369115a9182b889411bbe00fa74247006fe136ccbcc7c90c5f7

  • SHA512

    a3aa1e3e040c07f9fd2446673a6fad21a042a92919925bf5656b927b7a40c1b4852c5b1fc2bab915f323b8a67fd0e3959e54b4b03af303faed0c33ab1d5d5383

  • SSDEEP

    768:nMShsaRvzBnob++QFiXzSUHPsLqpRDF8JmOSGkOE8YIDl9Gu/izRC8sXGYbOkBL:nVsuF+9DSUHPsUFIeOYIB4r4/2YvBL

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      fb8bddbc583183582742ecae76e31967af22f63f18e9454fbcdc45697a628394.elf

    • Size

      101KB

    • MD5

      426bfa9b1f8bf6a028d2f5a7a09176a0

    • SHA1

      30dc5cf1650761dc7d36721785b6c29b1a82a89f

    • SHA256

      fb8bddbc583183582742ecae76e31967af22f63f18e9454fbcdc45697a628394

    • SHA512

      ebe9f9a15564db59e3b37336042d301aee28ff87349299b620a778dbbd158136ade93a6860979f8c6e7bebbb5f041f123682c8d079fdbe99a0c88a0c3f68fab7

    • SSDEEP

      3072:KsPwVe1e5hpUZKaGU+L7yj0yrQ0Knm4XnTe:1Pv1e5hOZKNSj0yrQ0Knm4XnTe

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks