General

  • Target

    b2349a7cbd761d55bac7d3a6c142019d8d67574b94dd34c54a31cda23390e5a6.elf

  • Size

    105KB

  • Sample

    250219-f1bhxsyjdw

  • MD5

    1e34326780f5b572a07461e4635a1587

  • SHA1

    8f515ed9d8fdbfd771b5f975fdfd78e08726d7c3

  • SHA256

    b2349a7cbd761d55bac7d3a6c142019d8d67574b94dd34c54a31cda23390e5a6

  • SHA512

    578b6e0c10076bd71a3c2e27c58875fd2c24cb903f950c9b3379594d23dea8bdcaf164ad30f0c115cf7642440ae929b3f83533f17e94e3edc076ed51ac89fd19

  • SSDEEP

    3072:MSk+U6m1qW/w8SlPbiRq6AmkZrQAhPDCXFke:U6mgW/1SlPXmkZrQAhPDCXFke

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

205.185.115.242:12345

Targets

    • Target

      b2349a7cbd761d55bac7d3a6c142019d8d67574b94dd34c54a31cda23390e5a6.elf

    • Size

      105KB

    • MD5

      1e34326780f5b572a07461e4635a1587

    • SHA1

      8f515ed9d8fdbfd771b5f975fdfd78e08726d7c3

    • SHA256

      b2349a7cbd761d55bac7d3a6c142019d8d67574b94dd34c54a31cda23390e5a6

    • SHA512

      578b6e0c10076bd71a3c2e27c58875fd2c24cb903f950c9b3379594d23dea8bdcaf164ad30f0c115cf7642440ae929b3f83533f17e94e3edc076ed51ac89fd19

    • SSDEEP

      3072:MSk+U6m1qW/w8SlPbiRq6AmkZrQAhPDCXFke:U6mgW/1SlPXmkZrQAhPDCXFke

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks