General

  • Target

    x86_64.elf

  • Size

    100KB

  • Sample

    241229-pz7pea1rhx

  • MD5

    43d9d036cb3a5aab6154e8740f9d6ece

  • SHA1

    3735d09ba41944ba8d873c2f704d22297b0222fc

  • SHA256

    42887360eadb0f439745caaf2eb0a1767405c7b2541c9e45cef532580b8e46ee

  • SHA512

    bbcad62c040b6af840f4b20a555a0418d2f37b68521475fbd0af940a7415034f4778aa3deb96e52b4cec9db95435a887e89059eaed5c7b1e24d246409e1a9289

  • SSDEEP

    3072:2d2nDFe2oeLOOtJYyhAD3rZSrsphaiepTmHyVQX5A+u+cm:vqyhQ7phaieRmHyVQX5A+u+cm

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

98.159.236.221:23

Targets

    • Target

      x86_64.elf

    • Size

      100KB

    • MD5

      43d9d036cb3a5aab6154e8740f9d6ece

    • SHA1

      3735d09ba41944ba8d873c2f704d22297b0222fc

    • SHA256

      42887360eadb0f439745caaf2eb0a1767405c7b2541c9e45cef532580b8e46ee

    • SHA512

      bbcad62c040b6af840f4b20a555a0418d2f37b68521475fbd0af940a7415034f4778aa3deb96e52b4cec9db95435a887e89059eaed5c7b1e24d246409e1a9289

    • SSDEEP

      3072:2d2nDFe2oeLOOtJYyhAD3rZSrsphaiepTmHyVQX5A+u+cm:vqyhQ7phaieRmHyVQX5A+u+cm

    Score
    7/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v15

Tasks