General

  • Target

    10aa1628b0ba7e10901f5e68e7ab43d45cb0e4190b83f903d52d7d259e27189e.elf

  • Size

    93KB

  • Sample

    250101-clkw9szrgw

  • MD5

    64d347a729365f1fb36484aa4cd15a8e

  • SHA1

    da0762747602b966cf376fc47a297b215866c162

  • SHA256

    10aa1628b0ba7e10901f5e68e7ab43d45cb0e4190b83f903d52d7d259e27189e

  • SHA512

    af9ef53fb5565e8f1d478e35d6ab6868c14b900567fc8491b839c5335022adff4dea3a0941ec8ed1d4d6ed46750ffa76fc9ff34a0db8ea436ff988eb1a7cf524

  • SSDEEP

    1536:EqbWlmxw2d8cXAjz+ZW5axHcZFEi5E3yJOdVfR0OQwpafC94miSiwF8LAYOy4:EqbWEKvqpefE53yJOdx9Q7fCGmNiwFyY

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.179.230.64:606

Targets

    • Target

      10aa1628b0ba7e10901f5e68e7ab43d45cb0e4190b83f903d52d7d259e27189e.elf

    • Size

      93KB

    • MD5

      64d347a729365f1fb36484aa4cd15a8e

    • SHA1

      da0762747602b966cf376fc47a297b215866c162

    • SHA256

      10aa1628b0ba7e10901f5e68e7ab43d45cb0e4190b83f903d52d7d259e27189e

    • SHA512

      af9ef53fb5565e8f1d478e35d6ab6868c14b900567fc8491b839c5335022adff4dea3a0941ec8ed1d4d6ed46750ffa76fc9ff34a0db8ea436ff988eb1a7cf524

    • SSDEEP

      1536:EqbWlmxw2d8cXAjz+ZW5axHcZFEi5E3yJOdVfR0OQwpafC94miSiwF8LAYOy4:EqbWEKvqpefE53yJOdx9Q7fCGmNiwFyY

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks