General

  • Target

    531e818ee346f15e78c4f08d8de52a64597e10ce744b1be9dd2137eb1cd78c1d.elf

  • Size

    199KB

  • Sample

    241224-ebl3pa1ngq

  • MD5

    f2ab2725ea6c883a5c608bc365c41fe5

  • SHA1

    454d6983d9a7bb59aa0441b2c2cc805a97738e66

  • SHA256

    531e818ee346f15e78c4f08d8de52a64597e10ce744b1be9dd2137eb1cd78c1d

  • SHA512

    572183decc9a9ee8878e77485db9a22b6b0606e667743788eb5f5b1f8f35522505c216fe027931fa8913989053fa346b46b78c6b2209ecd53630bbc14e1d3a26

  • SSDEEP

    3072:RcP3dhk/14WanspUO5heYuQJmmBnZvP/un:ePtoTUO5heYuQJmmBnZvP/un

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

154.213.186.115:4444

Targets

    • Target

      531e818ee346f15e78c4f08d8de52a64597e10ce744b1be9dd2137eb1cd78c1d.elf

    • Size

      199KB

    • MD5

      f2ab2725ea6c883a5c608bc365c41fe5

    • SHA1

      454d6983d9a7bb59aa0441b2c2cc805a97738e66

    • SHA256

      531e818ee346f15e78c4f08d8de52a64597e10ce744b1be9dd2137eb1cd78c1d

    • SHA512

      572183decc9a9ee8878e77485db9a22b6b0606e667743788eb5f5b1f8f35522505c216fe027931fa8913989053fa346b46b78c6b2209ecd53630bbc14e1d3a26

    • SSDEEP

      3072:RcP3dhk/14WanspUO5heYuQJmmBnZvP/un:ePtoTUO5heYuQJmmBnZvP/un

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks