General

  • Target

    b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320.elf

  • Size

    107KB

  • Sample

    250219-f14vgayjdn

  • MD5

    89237fc2562becf3d68d120d9fecf9c2

  • SHA1

    7ebde82f839a297dcd1783bb709bf58e0c481eb7

  • SHA256

    b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320

  • SHA512

    3172921bb78110597fb4e77162c1d823b736a330cac813f1932812708af9e85556c78b8c00b11b68206422ada974185a0f2545e104fbefe77cb49e93be3fea85

  • SSDEEP

    3072:ZFHv0mqU75U5Cl+eextNko4G3Ajgs6F0m5qbyCYXmh:ZZ0B25CCRexkfG3AjgvGm5qbyRXmh

Malware Config

Extracted

Family

gafgyt

C2

209.141.57.97:23

Targets

    • Target

      b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320.elf

    • Size

      107KB

    • MD5

      89237fc2562becf3d68d120d9fecf9c2

    • SHA1

      7ebde82f839a297dcd1783bb709bf58e0c481eb7

    • SHA256

      b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320

    • SHA512

      3172921bb78110597fb4e77162c1d823b736a330cac813f1932812708af9e85556c78b8c00b11b68206422ada974185a0f2545e104fbefe77cb49e93be3fea85

    • SSDEEP

      3072:ZFHv0mqU75U5Cl+eextNko4G3Ajgs6F0m5qbyCYXmh:ZZ0B25CCRexkfG3AjgvGm5qbyRXmh

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks