General

  • Target

    1f7ba28d9d2ea091a89b2f7e4131b76163a6dcfb696cc34b073de8c9bf8afc4d.elf

  • Size

    135KB

  • Sample

    241224-c2dg5azlfn

  • MD5

    4ca387e1408f29f6ed1979acfb671f82

  • SHA1

    3467879b5fd631a5884f947ba013d61ea8a33c91

  • SHA256

    1f7ba28d9d2ea091a89b2f7e4131b76163a6dcfb696cc34b073de8c9bf8afc4d

  • SHA512

    18995f38839a98d0d478dad4b4b000e478effd1acaea865a5e947454e1d17d296ae519556f1a30f875b505f38f298440d20ff988440457907d5dd3ae9492c738

  • SSDEEP

    3072:fKat6ULUeU/UnUIuU5So3bAS4hWx9uIQ05hpRJCJWimJswdytNr9:fcIXSo+To3bih49uIX5hjJCJ/mJswdyh

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.186.115:4444

Targets

    • Target

      1f7ba28d9d2ea091a89b2f7e4131b76163a6dcfb696cc34b073de8c9bf8afc4d.elf

    • Size

      135KB

    • MD5

      4ca387e1408f29f6ed1979acfb671f82

    • SHA1

      3467879b5fd631a5884f947ba013d61ea8a33c91

    • SHA256

      1f7ba28d9d2ea091a89b2f7e4131b76163a6dcfb696cc34b073de8c9bf8afc4d

    • SHA512

      18995f38839a98d0d478dad4b4b000e478effd1acaea865a5e947454e1d17d296ae519556f1a30f875b505f38f298440d20ff988440457907d5dd3ae9492c738

    • SSDEEP

      3072:fKat6ULUeU/UnUIuU5So3bAS4hWx9uIQ05hpRJCJWimJswdytNr9:fcIXSo+To3bih49uIX5hjJCJ/mJswdyh

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks