General

  • Target

    kitsune.arm5.elf

  • Size

    150KB

  • Sample

    241226-z1573szqg1

  • MD5

    65072f4e0786a6f75dc96d8b90cd0d6c

  • SHA1

    f0b1133c3e201193e13f4b6b182c2cfcb8f5ba97

  • SHA256

    96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803

  • SHA512

    7adeee93589e774c1f3e689585adb790e5ad241c2dbe148233b84481c383542241e0b0696ea52980b305d3f5806ef9204e613fb968ce17130d4049a045886262

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAM5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Targets

    • Target

      kitsune.arm5.elf

    • Size

      150KB

    • MD5

      65072f4e0786a6f75dc96d8b90cd0d6c

    • SHA1

      f0b1133c3e201193e13f4b6b182c2cfcb8f5ba97

    • SHA256

      96246a2776def4733fda0ae3cff2df98d0c4a9a27bbda1df3d4451b8c925c803

    • SHA512

      7adeee93589e774c1f3e689585adb790e5ad241c2dbe148233b84481c383542241e0b0696ea52980b305d3f5806ef9204e613fb968ce17130d4049a045886262

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAM5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks