General

  • Target

    kitsune.arm4.elf

  • Size

    112KB

  • Sample

    241226-z1573szrbp

  • MD5

    d59dcafcf80778e83d08e570c06be735

  • SHA1

    c93b91844f15557ee6fbc49d9331505c846b6827

  • SHA256

    b7a92b169626e3b6cdd4e4ae1bfece45ce3a0a32a33952b154a0deeda351c624

  • SHA512

    38060a34ba1c139eb4aff6da2bcdd225fc6e0149d7665c8563a74b3ea163938b27b99744993d1962f4dfda54d028d62a7c095d07f4ee19a84c7104f43b3d65da

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tt5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtt5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Targets

    • Target

      kitsune.arm4.elf

    • Size

      112KB

    • MD5

      d59dcafcf80778e83d08e570c06be735

    • SHA1

      c93b91844f15557ee6fbc49d9331505c846b6827

    • SHA256

      b7a92b169626e3b6cdd4e4ae1bfece45ce3a0a32a33952b154a0deeda351c624

    • SHA512

      38060a34ba1c139eb4aff6da2bcdd225fc6e0149d7665c8563a74b3ea163938b27b99744993d1962f4dfda54d028d62a7c095d07f4ee19a84c7104f43b3d65da

    • SSDEEP

      3072:vhfviOui5FCRSUaVejY68tt5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtt5hqSr3hGm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks