General

  • Target

    4d57e5b4b10a8363b2fdd134bb139b44cbcd275cdd1474ea95a1a6aee8a78cd1.elf

  • Size

    156KB

  • Sample

    250108-cxvkvaskhk

  • MD5

    4809c88793a97372492b29a89f59c455

  • SHA1

    55cf5e0f3676308cdecbf163a69708cea6392dc5

  • SHA256

    4d57e5b4b10a8363b2fdd134bb139b44cbcd275cdd1474ea95a1a6aee8a78cd1

  • SHA512

    bead5ae01fec656f172d52027d3c94729d5501d6444bebe372f9676372e7f637bf9c13911185e180bd95906dac23003197c77acee3f5b317c7d38250057292c1

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBxYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/HYnydM/9MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

38.134.189.10:12345

Targets

    • Target

      4d57e5b4b10a8363b2fdd134bb139b44cbcd275cdd1474ea95a1a6aee8a78cd1.elf

    • Size

      156KB

    • MD5

      4809c88793a97372492b29a89f59c455

    • SHA1

      55cf5e0f3676308cdecbf163a69708cea6392dc5

    • SHA256

      4d57e5b4b10a8363b2fdd134bb139b44cbcd275cdd1474ea95a1a6aee8a78cd1

    • SHA512

      bead5ae01fec656f172d52027d3c94729d5501d6444bebe372f9676372e7f637bf9c13911185e180bd95906dac23003197c77acee3f5b317c7d38250057292c1

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBxYnyLRM/9q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/HYnydM/9MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks