General

  • Target

    kitsune.x86.elf

  • Size

    106KB

  • Sample

    241226-z1573szqhv

  • MD5

    afafe44e75da13379d6c74e263213913

  • SHA1

    7762088cbd13d325664bd38bef5860b4dc3fc4e7

  • SHA256

    5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890

  • SHA512

    938f2474741e445dc8fea3c3cd23b2d5c4340a3ddc454c45e3b8917bf612174e8a13520a0f21b007d631b309889e06e363ccfccf5dd5e0b072c7a3359b921e48

  • SSDEEP

    3072:j6dye4BmJQRphaZw/1vc45AzkSXmdRWaLHgb4:dRphaZcErmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Targets

    • Target

      kitsune.x86.elf

    • Size

      106KB

    • MD5

      afafe44e75da13379d6c74e263213913

    • SHA1

      7762088cbd13d325664bd38bef5860b4dc3fc4e7

    • SHA256

      5e0bf4cb5e267eacdad0681934369a646db7abb39e4f32b0c6f23f88def4e890

    • SHA512

      938f2474741e445dc8fea3c3cd23b2d5c4340a3ddc454c45e3b8917bf612174e8a13520a0f21b007d631b309889e06e363ccfccf5dd5e0b072c7a3359b921e48

    • SSDEEP

      3072:j6dye4BmJQRphaZw/1vc45AzkSXmdRWaLHgb4:dRphaZcErmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks