General

  • Target

    40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc.elf

  • Size

    112KB

  • Sample

    250107-cng86a1nep

  • MD5

    d7b9aff6562fd20e5e8bd777a7c4de3b

  • SHA1

    1d02a38792ed91f03daf7c3d058c9283803a09ff

  • SHA256

    40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc

  • SHA512

    5ae3d1688795baabd4d08c9c5ade0b1afb468eafdb4b0571afad87018ce03f594a4635cb0c5153b3e830539fd14547732cb976d65874d6b01f822c6557d3f67f

  • SSDEEP

    3072:ULveOu+5FClWUaVeDYeQ1C5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1C5hiBrn1Gm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Targets

    • Target

      40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc.elf

    • Size

      112KB

    • MD5

      d7b9aff6562fd20e5e8bd777a7c4de3b

    • SHA1

      1d02a38792ed91f03daf7c3d058c9283803a09ff

    • SHA256

      40a2709316b4f721d61070845395b232ed4762db4b904f0cab66e931828425bc

    • SHA512

      5ae3d1688795baabd4d08c9c5ade0b1afb468eafdb4b0571afad87018ce03f594a4635cb0c5153b3e830539fd14547732cb976d65874d6b01f822c6557d3f67f

    • SSDEEP

      3072:ULveOu+5FClWUaVeDYeQ1C5hiBrn1Gm0Qxu1bXWIn:6v78EVeDYH1C5hiBrn1Gm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks