Overview

overview

10

Static

static

10

ssi.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ssi.elf

  • Size

    93KB

  • Sample

    250109-h1hcksspcx

  • MD5

    30694d958a9e2308817e320f254df07a

  • SHA1

    4e4b0f201afff635eeb94ab741bd5bd3524252de

  • SHA256

    23fc21364599d0415706b7b1d7e6d53d2d56a1af5aaa794dd4df2d934728bc2a

  • SHA512

    62c9eee761f0130326c54b1b32990b86fc3933b94bcdf29d900b73a91d808940c79f4a8fa236af0b6bcb5d5bd03a6573a05248f55966c797c08206ba4df7321c

  • SSDEEP

    1536:DrSthiWmGWE6BALuPLkklHAkw7WBU/GNX79ejBd/kncW7efTcgZvYV:chiWKBBALuTZNPwQU/GPedNkncW7ef45

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

89.33.192.138:6581

Targets

    • Target

      ssi.elf

    • Size

      93KB

    • MD5

      30694d958a9e2308817e320f254df07a

    • SHA1

      4e4b0f201afff635eeb94ab741bd5bd3524252de

    • SHA256

      23fc21364599d0415706b7b1d7e6d53d2d56a1af5aaa794dd4df2d934728bc2a

    • SHA512

      62c9eee761f0130326c54b1b32990b86fc3933b94bcdf29d900b73a91d808940c79f4a8fa236af0b6bcb5d5bd03a6573a05248f55966c797c08206ba4df7321c

    • SSDEEP

      1536:DrSthiWmGWE6BALuPLkklHAkw7WBU/GNX79ejBd/kncW7efTcgZvYV:chiWKBBALuTZNPwQU/GPedNkncW7ef45

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks