Overview

overview

10

Static

static

10

rebirth.sh4.elf

ubuntu-18.04-amd64

rebirth.sh4.elf

debian-9-armhf

rebirth.sh4.elf

debian-9-mips

rebirth.sh4.elf

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rebirth.sh4.elf

  • Size

    94KB

  • Sample

    250203-metwpsykaz

  • MD5

    b844576d22738f1350db130c5e176068

  • SHA1

    522eccfc41963b42c24fdb38acf907fdd7c58048

  • SHA256

    3e4d7cddf1e799f88b54aaff203061d2ad9b90f69d2e99c3b0f2a8629a9d4ffe

  • SHA512

    7adcbe907d4e12c728c7683414c85e83613214857f5f431b0485ff96a4983fdf377dfddac0993b4a27a0807f2c2c043b6301ebb3cc8078c4e7a9c636ec597c01

  • SSDEEP

    1536:TeDM+Vlabe0Ff5soS4yfafPdfmoDs2tSYVm+:Tj+Vlab/DDfPdm0s28YVm+

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

193.233.203.30:666

Targets

    • Target

      rebirth.sh4.elf

    • Size

      94KB

    • MD5

      b844576d22738f1350db130c5e176068

    • SHA1

      522eccfc41963b42c24fdb38acf907fdd7c58048

    • SHA256

      3e4d7cddf1e799f88b54aaff203061d2ad9b90f69d2e99c3b0f2a8629a9d4ffe

    • SHA512

      7adcbe907d4e12c728c7683414c85e83613214857f5f431b0485ff96a4983fdf377dfddac0993b4a27a0807f2c2c043b6301ebb3cc8078c4e7a9c636ec597c01

    • SSDEEP

      1536:TeDM+Vlabe0Ff5soS4yfafPdfmoDs2tSYVm+:Tj+Vlab/DDfPdm0s28YVm+

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks