Overview

overview

10

Static

static

10

223081fec3...71.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86e0ecb88b3a5880862e0be8e3ab0fc1.bin

  • Size

    50KB

  • Sample

    241224-bxzzwsxqew

  • MD5

    c3f1e7adb4ef8ac3e06ff765e4c64de7

  • SHA1

    f49bbc445b6d2474f98f7da84e892f1ee56867af

  • SHA256

    1c707809e5bffb86db0e6049bd0e34f71822bf2ffe0c0a8c9b5190ed3683adb4

  • SHA512

    2eca2ed179965cbb6913e0a928395cc486aa7489bf2caa02d7618756466cfb7c185d20e4f41c1386f26b66f36326d6c0d1ea1e4948915a7556898a4d2b729031

  • SSDEEP

    1536:ovuSHS6NzoUtrzmSppJEfSBPKuzGWlcUr21:oZHSqoURaS3JEqBPKFWlbw

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

31.172.83.147:4258

Targets

    • Target

      223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671.elf

    • Size

      113KB

    • MD5

      86e0ecb88b3a5880862e0be8e3ab0fc1

    • SHA1

      a1fae4ceab4241c5d7bd3c20c32a98d143ffdc24

    • SHA256

      223081fec38b805a88edf16c10d9dbc961af19af51edf96ae7fe4af15ff23671

    • SHA512

      83747bf98fe12efc20839f419b35ba3c1f5c31d74597708cc8db313101e0d852b3222a538326c9872fc8f9d276a6a03e606c452876bdda30f91b17e214b3a9c5

    • SSDEEP

      3072:udGs8aNAHiNPHS7fSiq5hulKM7y1myjQUJ1UXpTn:2Gs8aNEiPiq5hulKN1myjQUJ1apTn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks