General

  • Target

    4011ff32930a3b9dbb07950bf6ac6c74a321b1e3b98f49c3d8b5ba6497087062.elf

  • Size

    150KB

  • Sample

    241227-cnd7hayrfv

  • MD5

    6027b26bd46af0e279160fa7f31953a9

  • SHA1

    2fba8de46cfa131e8136f3deee00b1ba901c4d13

  • SHA256

    4011ff32930a3b9dbb07950bf6ac6c74a321b1e3b98f49c3d8b5ba6497087062

  • SHA512

    2e0828425e70853a11908ab7d9731feb3770e4c8d9d4817f797c68ef33d0babb03138bd9e31b265942335e3141bae17a76e137b1f540f996964852f9cd8c0432

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAM5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGZWYxVldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

178.215.238.69:4258

Targets

    • Target

      4011ff32930a3b9dbb07950bf6ac6c74a321b1e3b98f49c3d8b5ba6497087062.elf

    • Size

      150KB

    • MD5

      6027b26bd46af0e279160fa7f31953a9

    • SHA1

      2fba8de46cfa131e8136f3deee00b1ba901c4d13

    • SHA256

      4011ff32930a3b9dbb07950bf6ac6c74a321b1e3b98f49c3d8b5ba6497087062

    • SHA512

      2e0828425e70853a11908ab7d9731feb3770e4c8d9d4817f797c68ef33d0babb03138bd9e31b265942335e3141bae17a76e137b1f540f996964852f9cd8c0432

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAM5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDT15hWTGZWYxVldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks