General

  • Target

    172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf.elf

  • Size

    150KB

  • Sample

    241227-cld4qayrbq

  • MD5

    7ab971aa7550c4f6f163521e1fa28cae

  • SHA1

    d6df5deb85b2bd66ebce6ccf6ed6eaa82c30b1bb

  • SHA256

    172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf

  • SHA512

    31e3a9e6ccea09d8e7faa7a29bfbaad33b43a4bea67983d845a01f3d5685017bf558698ee89f1a649efb965b6339434273ea7653bfb851c514afb3c6ee59fba6

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAM5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGHIM/9ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Targets

    • Target

      172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf.elf

    • Size

      150KB

    • MD5

      7ab971aa7550c4f6f163521e1fa28cae

    • SHA1

      d6df5deb85b2bd66ebce6ccf6ed6eaa82c30b1bb

    • SHA256

      172c27f4db94fe22346ac3f75303dc2a851f48eaba784d083365ec1a396717bf

    • SHA512

      31e3a9e6ccea09d8e7faa7a29bfbaad33b43a4bea67983d845a01f3d5685017bf558698ee89f1a649efb965b6339434273ea7653bfb851c514afb3c6ee59fba6

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAM5hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGHIM/9ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks