General

  • Target

    e6afd2316ed37511b7a97ee6d8ef484464978c49ae2637161ec4be03a600b03e.elf

  • Size

    123KB

  • Sample

    250108-drkzws1res

  • MD5

    1f4c4496d0c6887624c3c05d309f83d4

  • SHA1

    537e1b6ccba3e1d82cafda5560e5da9d4645c2d3

  • SHA256

    e6afd2316ed37511b7a97ee6d8ef484464978c49ae2637161ec4be03a600b03e

  • SHA512

    c7c98c15c738e9af21fdb2f8dfb5e60c68d6dfcc6da9ba8fa9bd635da27472246dcd37d549ad61eaf1a853a31dcbc8d9b1a7c9359992ea592d2ff811d80223cd

  • SSDEEP

    1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe+EdWfRZrmW+IFj:Ted0W0MZQHQd6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

38.134.189.10:12345

Targets

    • Target

      e6afd2316ed37511b7a97ee6d8ef484464978c49ae2637161ec4be03a600b03e.elf

    • Size

      123KB

    • MD5

      1f4c4496d0c6887624c3c05d309f83d4

    • SHA1

      537e1b6ccba3e1d82cafda5560e5da9d4645c2d3

    • SHA256

      e6afd2316ed37511b7a97ee6d8ef484464978c49ae2637161ec4be03a600b03e

    • SHA512

      c7c98c15c738e9af21fdb2f8dfb5e60c68d6dfcc6da9ba8fa9bd635da27472246dcd37d549ad61eaf1a853a31dcbc8d9b1a7c9359992ea592d2ff811d80223cd

    • SSDEEP

      1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+u60GAzQj1l72HBe+EdWfRZrmW+IFj:Ted0W0MZQHQd6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks