General

  • Target

    49b4069d61d66beb779fe2797a0f0f82ee044c915c9edca250343c2ae341620e.elf

  • Size

    157KB

  • Sample

    250101-c1qfas1nbz

  • MD5

    5e0d02ef99d7c1c2fbf413a108e6eeae

  • SHA1

    77a5e006edd227c34d97797444e7ba4c83cdf343

  • SHA256

    49b4069d61d66beb779fe2797a0f0f82ee044c915c9edca250343c2ae341620e

  • SHA512

    dc364a2305b1891695e740b81b78bd5276669c7dbafcb4bf601ffcd9f76fbfa3912599997c3be14a8ff0a4ab0c04c9a6f6bffe2322196ad68f1c758eca403178

  • SSDEEP

    3072:ChA2qd/yhKBgXz3uaOmzq+XCd88V7Xxg2mgwZBxSQzNa:32qd/2KBgD3ua/TXCd88V7XVmgwZBxJg

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.179.230.64:606

Targets

    • Target

      49b4069d61d66beb779fe2797a0f0f82ee044c915c9edca250343c2ae341620e.elf

    • Size

      157KB

    • MD5

      5e0d02ef99d7c1c2fbf413a108e6eeae

    • SHA1

      77a5e006edd227c34d97797444e7ba4c83cdf343

    • SHA256

      49b4069d61d66beb779fe2797a0f0f82ee044c915c9edca250343c2ae341620e

    • SHA512

      dc364a2305b1891695e740b81b78bd5276669c7dbafcb4bf601ffcd9f76fbfa3912599997c3be14a8ff0a4ab0c04c9a6f6bffe2322196ad68f1c758eca403178

    • SSDEEP

      3072:ChA2qd/yhKBgXz3uaOmzq+XCd88V7Xxg2mgwZBxSQzNa:32qd/2KBgD3ua/TXCd88V7XVmgwZBxJg

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks