Overview

overview

10

Static

static

10

aad6878d2a...1e.elf

ubuntu-24.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    589d6374c72c1721be71a3a5e3de4a09.bin

  • Size

    45KB

  • Sample

    241224-bpmplaxqcm

  • MD5

    98687c49666c4a857b0f88d8c24b952f

  • SHA1

    e55eff8025db0963b81374dde2452cce63316199

  • SHA256

    572ce3387b3bac7074c9556bd7338f43928e806c766a7b7280756bbb8bd32b85

  • SHA512

    033a26957ee866a479b72f6d1e8647c29a0056c642a2e419958f736bd13a4d248960b2a1b56de8f6b4084618f7355215878a4c00e746396577c875ddfac102e2

  • SSDEEP

    768:42L57ElRnB1WaIXl+IpdeKZBIUx8DZIAx7NtH5m09OQwZtEAtR/x/QQ:SehXJTeKZpxEzxO09O5ZtZT

Score
10/10
gafgytdiscoverylinux

Malware Config

Extracted

Family

gafgyt

C2

185.216.71.152:4258

Targets

    • Target

      aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e.elf

    • Size

      106KB

    • MD5

      589d6374c72c1721be71a3a5e3de4a09

    • SHA1

      e3dea83cde3691800e8751c9e5d7730761eeec6e

    • SHA256

      aad6878d2aa36a8eb4f95279b6ffea26d83b53df9e27f921b83a986a819d041e

    • SHA512

      473015e18b1c8c70bfaeb4b156df9b4299ef529877eeb329f00cafe34a4c7fd96d83e00e007baa79712d255ea5182da4e74d31ca084de3fa0df55411ae1aa40b

    • SSDEEP

      3072:j6dye4BmJQqphaZw/1vc45AzkSXmdRWaLHgb4:dqphaZcErmdRWaDgb4

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks