General

  • Target

    e6028df9276684a36550e202381ef4b96ade5afd2218348d97910c4a1f23e33f.elf

  • Size

    94KB

  • Sample

    250101-dxmexavqfp

  • MD5

    c3daf0f18f197136bd99629b9c0a5896

  • SHA1

    7e0d7ad8a7171a1139b758091bf9a8ecfabba4f1

  • SHA256

    e6028df9276684a36550e202381ef4b96ade5afd2218348d97910c4a1f23e33f

  • SHA512

    28b46f6585816df741f61986d19af3b85b93634c703cc377944448c6258f57764d2ad516e9da3863de83caff78873bbabf82131ff3be16ee3d6ebc3f60365ea5

  • SSDEEP

    1536:djjfeAX6VVXisn4Ae9rjwNGlThAwxpAywDAQkzBAumun7H1pm5SiwF8LAYOy4:djjeTzn4Ae6ETmwr1wUv+ujzmUiwFyAv

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

195.179.230.64:606

Targets

    • Target

      e6028df9276684a36550e202381ef4b96ade5afd2218348d97910c4a1f23e33f.elf

    • Size

      94KB

    • MD5

      c3daf0f18f197136bd99629b9c0a5896

    • SHA1

      7e0d7ad8a7171a1139b758091bf9a8ecfabba4f1

    • SHA256

      e6028df9276684a36550e202381ef4b96ade5afd2218348d97910c4a1f23e33f

    • SHA512

      28b46f6585816df741f61986d19af3b85b93634c703cc377944448c6258f57764d2ad516e9da3863de83caff78873bbabf82131ff3be16ee3d6ebc3f60365ea5

    • SSDEEP

      1536:djjfeAX6VVXisn4Ae9rjwNGlThAwxpAywDAQkzBAumun7H1pm5SiwF8LAYOy4:djjeTzn4Ae6ETmwr1wUv+ujzmUiwFyAv

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks