Overview

overview

10

Static

static

10

8aaf675182...22.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51b52744e7a0eab5a4d11a308e7a62ea.bin

  • Size

    52KB

  • Sample

    250108-bll9naxmex

  • MD5

    e8a977a0598fbf2af63e1c3024a905bb

  • SHA1

    9061216ba787266724b4951fb8770cfb96be6836

  • SHA256

    910ee2c8c42675bead80d9b8d1ee0bdaba6803997d353f71250e8d20a9d1a426

  • SHA512

    3b806512721ed2d418f2d82569d268347195427cd21c7178664beffc8246dfd34a574588c8ce1d068f159a8382cc3e854b7e6270a07a2dfce6de8b1514896764

  • SSDEEP

    1536:gu5HLysmt4s7061RDVfxIV7+/NWK6sCY/mDHNTe8f:95rypt5Z1mVhcVoz

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

185.103.102.219:4258

Targets

    • Target

      8aaf675182cf45012d8be3212cf930b62455ee0cc119960506268b6921bbb522.elf

    • Size

      141KB

    • MD5

      51b52744e7a0eab5a4d11a308e7a62ea

    • SHA1

      610ed1a69c563c1987adedbcb039eff53ed56234

    • SHA256

      8aaf675182cf45012d8be3212cf930b62455ee0cc119960506268b6921bbb522

    • SHA512

      66e7b7d32abc4a2b29a2d65785d39cb56b94b951dc3d3a2af676fe92f23258c214ad194d95bc791f7df4b8ba51c684a46e594040187da6900adfd16f34e323a8

    • SSDEEP

      3072:lBDH4L9VHGn7vsl5h9DLHpVFm0/5ApYADn:lhHaWvsl5h9Hp7m0/5ASADn

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks