General

  • Target

    armv4l.elf

  • Size

    113KB

  • Sample

    241229-pz7z6ssjat

  • MD5

    e16ee7aa765eda6e562ca86e08c9945b

  • SHA1

    052f6f651d95608d861a163da08f9de329947374

  • SHA256

    d61e85f0ebb52fd7c8ccffcffdc9b9d437ad5e64c06d23d69c95c835286387fd

  • SHA512

    028504d6c85657710235d12e8da7cfe5e0e0e1cfa13557a31125853f3a1275d8cf60a8041c8e74e54c5fc9cacb558d5f1fc53fb5a56e475e75b4916cb9cdd9f9

  • SSDEEP

    3072:lqDUOulvQ+nozmrCppEDtkLWE5h8MbKZlrDoeZNV7YHQQ/hVOmAD3m:0pEcWE5h8MbK97YHQQ/hVOmAD3m

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

98.159.236.221:23

Targets

    • Target

      armv4l.elf

    • Size

      113KB

    • MD5

      e16ee7aa765eda6e562ca86e08c9945b

    • SHA1

      052f6f651d95608d861a163da08f9de329947374

    • SHA256

      d61e85f0ebb52fd7c8ccffcffdc9b9d437ad5e64c06d23d69c95c835286387fd

    • SHA512

      028504d6c85657710235d12e8da7cfe5e0e0e1cfa13557a31125853f3a1275d8cf60a8041c8e74e54c5fc9cacb558d5f1fc53fb5a56e475e75b4916cb9cdd9f9

    • SSDEEP

      3072:lqDUOulvQ+nozmrCppEDtkLWE5h8MbKZlrDoeZNV7YHQQ/hVOmAD3m:0pEcWE5h8MbK97YHQQ/hVOmAD3m

    Score
    7/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v15

Tasks