General

  • Target

    d46252e1bbc794e004f7a060042b4522c4392a3d39fe5cf6eef98f50deb636a7.elf

  • Size

    150KB

  • Sample

    250107-dcj42ssqbp

  • MD5

    bea42eb8c137e1ca501442e944156844

  • SHA1

    a6e9e72a66d1d660d3bf6944bb3090ca4a2a0adb

  • SHA256

    d46252e1bbc794e004f7a060042b4522c4392a3d39fe5cf6eef98f50deb636a7

  • SHA512

    ecebe1d5c6c3008a49d7876c1e3ab8bfc773e87480867a465cf482753773516236eb66fc98ff0f1a0d1eee8a017a569d62fffa5c2090da96e100c7667c9fe015

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gv5hZ1GZWYxVkxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GZWYxVkNmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Targets

    • Target

      d46252e1bbc794e004f7a060042b4522c4392a3d39fe5cf6eef98f50deb636a7.elf

    • Size

      150KB

    • MD5

      bea42eb8c137e1ca501442e944156844

    • SHA1

      a6e9e72a66d1d660d3bf6944bb3090ca4a2a0adb

    • SHA256

      d46252e1bbc794e004f7a060042b4522c4392a3d39fe5cf6eef98f50deb636a7

    • SHA512

      ecebe1d5c6c3008a49d7876c1e3ab8bfc773e87480867a465cf482753773516236eb66fc98ff0f1a0d1eee8a017a569d62fffa5c2090da96e100c7667c9fe015

    • SSDEEP

      3072:/dQbnQao0HawD+zQNz7gv5hZ1GZWYxVkxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GZWYxVkNmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks