General

  • Target

    sss.elf

  • Size

    143KB

  • Sample

    250109-h1hncavpaj

  • MD5

    963cb3bd320fb8ff58b2d746cbae8c51

  • SHA1

    979921f51203aff0d5ca613b2337fa7766d91579

  • SHA256

    99be0565b80517cf059611f6de332b27c052cc3e2026e103c653b42be6aa4847

  • SHA512

    4f7cd1be21c5f0084a6a0273b4f8d5b623a7b32807e41805b87e3cc4bb51e846beec469b1bd3a60821cb18010ad864b5cbf9253d669eae4fccd63ccb6b433095

  • SSDEEP

    3072:ux6sfSWxw/bNZuIkjbNzy2fIRQSGbt6nXcgKzemiFIRMiEIr4VDTnbbULjo5LGOj:u7yOAnXOT/Mha8rULjo5LGOPdsu3

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

89.33.192.138:6581

Targets

    • Target

      sss.elf

    • Size

      143KB

    • MD5

      963cb3bd320fb8ff58b2d746cbae8c51

    • SHA1

      979921f51203aff0d5ca613b2337fa7766d91579

    • SHA256

      99be0565b80517cf059611f6de332b27c052cc3e2026e103c653b42be6aa4847

    • SHA512

      4f7cd1be21c5f0084a6a0273b4f8d5b623a7b32807e41805b87e3cc4bb51e846beec469b1bd3a60821cb18010ad864b5cbf9253d669eae4fccd63ccb6b433095

    • SSDEEP

      3072:ux6sfSWxw/bNZuIkjbNzy2fIRQSGbt6nXcgKzemiFIRMiEIr4VDTnbbULjo5LGOj:u7yOAnXOT/Mha8rULjo5LGOPdsu3

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks