General

  • Target

    850b16592f84f97f7610403f51108d3d3c284b14b31126819c74cd9330103d35.elf

  • Size

    150KB

  • Sample

    250107-cz1vmszlhv

  • MD5

    05f3e69af94ba2858f7a9c8c646a9620

  • SHA1

    73b411a2961ef068b13b4da32c922e172718aaef

  • SHA256

    850b16592f84f97f7610403f51108d3d3c284b14b31126819c74cd9330103d35

  • SHA512

    aaf75eba68dd4d6b9fff0bb0d7bb83639bb99fdfb5f9cc5d51c3e473949bf8b6f80002150b6db78e42e27595cdcb7c045fec1cfc9b5fff30e2892e187e3a9fd4

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gv5hZ1GHJWM/9kxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GHIM/9kNmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Targets

    • Target

      850b16592f84f97f7610403f51108d3d3c284b14b31126819c74cd9330103d35.elf

    • Size

      150KB

    • MD5

      05f3e69af94ba2858f7a9c8c646a9620

    • SHA1

      73b411a2961ef068b13b4da32c922e172718aaef

    • SHA256

      850b16592f84f97f7610403f51108d3d3c284b14b31126819c74cd9330103d35

    • SHA512

      aaf75eba68dd4d6b9fff0bb0d7bb83639bb99fdfb5f9cc5d51c3e473949bf8b6f80002150b6db78e42e27595cdcb7c045fec1cfc9b5fff30e2892e187e3a9fd4

    • SSDEEP

      3072:/dQbnQao0HawD+zQNz7gv5hZ1GHJWM/9kxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GHIM/9kNmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks