General

  • Target

    rebirth.mips.elf

  • Size

    136KB

  • Sample

    241230-bn3dnasqhw

  • MD5

    4353fec11c2162255fde40e12f249f40

  • SHA1

    3230eefaf3e9021d8c48086400784e24627de84a

  • SHA256

    e8d6ab5513a8189b9d3f3141a58873190a96a5938e52936fa95f6df3f3f99d3d

  • SHA512

    a77455eb2420a34ab80d44c84f91471bb8875a38f0b5c4a3c3fec374010168d99ebf70349d6fb6982176386341910090230738d63a781ab2e314d9ac9f9dbe24

  • SSDEEP

    1536:DHfGlkuMau3GanIg2rK/c6U1J8iEHLfPti2dSImNEz7ugf7hoWlNDsCrj4hs29NA:Kx+/PtiJn8ugN9swXoVmCBgAYiCh

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

87.120.113.63:666

Targets

    • Target

      rebirth.mips.elf

    • Size

      136KB

    • MD5

      4353fec11c2162255fde40e12f249f40

    • SHA1

      3230eefaf3e9021d8c48086400784e24627de84a

    • SHA256

      e8d6ab5513a8189b9d3f3141a58873190a96a5938e52936fa95f6df3f3f99d3d

    • SHA512

      a77455eb2420a34ab80d44c84f91471bb8875a38f0b5c4a3c3fec374010168d99ebf70349d6fb6982176386341910090230738d63a781ab2e314d9ac9f9dbe24

    • SSDEEP

      1536:DHfGlkuMau3GanIg2rK/c6U1J8iEHLfPti2dSImNEz7ugf7hoWlNDsCrj4hs29NA:Kx+/PtiJn8ugN9swXoVmCBgAYiCh

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks