General

  • Target

    3b6ef94ff7bfeaba0f600ea8938a5a85.bin

  • Size

    66KB

  • Sample

    250108-blakvsxmc1

  • MD5

    7c6b2660f8a4b7ef21beb48211401fb6

  • SHA1

    384debd3ac37e75b3b43f40c0fc4e8eddb300580

  • SHA256

    fb816e722e49e600af321a713d4e12b313f64410e3d4513b01468ec016d53f45

  • SHA512

    20328661cc5295195ac40dc41e07d19552cb1e0d26c8724de791fdc742bbf0ae31a5cb0946cfff2c41f0a407aafd86be691b24c19d5313a0c390787b7430234e

  • SSDEEP

    1536:I8NioXXzX8+YUgYnP2rN2MUk9mBrVWWFGlGj4fySA:XrXz/YUjnfMUk4WWQl3VA

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Targets

    • Target

      2084f2448a61fe7fa9b857d5be2c0d25806625c317132acfc185538419dc8b0b.elf

    • Size

      150KB

    • MD5

      3b6ef94ff7bfeaba0f600ea8938a5a85

    • SHA1

      ed5da5fda59152df8fab8d34af537116a0c1dfd4

    • SHA256

      2084f2448a61fe7fa9b857d5be2c0d25806625c317132acfc185538419dc8b0b

    • SHA512

      f287b8c5200621dabdcfed405c86c8d2acf7648f1b5b6f0da0966be48b125c11d6d08f1d6b9f1ba97dc88682f0fc5cf9a4ab66ba65d750e17762684d837e4b48

    • SSDEEP

      3072:/dQbnQao0HawD+zQNz7gv5hZ1GU2WV7kxHmpwTsL/QMyn:VmQao0H3D9z7i5hZ1GU2WV7kNmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks