General

  • Target

    a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab.elf

  • Size

    127KB

  • Sample

    250219-fvh1taxrdw

  • MD5

    6490534077986eacdf5b0c5d8e7b3ad0

  • SHA1

    d2df89d1ef2a86df58c57f489a5efcb80fdea840

  • SHA256

    a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab

  • SHA512

    002b310a063e8471620cd8f2788a6571954d1a23d3ab8cede6f46c3eb4d4162423d9218b65bfd05bbd68285c128f6ee5b50ddebe3b7c8fa361e4b64005ced848

  • SSDEEP

    3072:WXP7vkp29g9zZHlSNCtVmptH9n3U4BkX0qmIhPBHwqW:Wvkpr96pHcfmIhPhwqW

Malware Config

Extracted

Family

gafgyt

C2

209.141.57.97:23

Targets

    • Target

      a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab.elf

    • Size

      127KB

    • MD5

      6490534077986eacdf5b0c5d8e7b3ad0

    • SHA1

      d2df89d1ef2a86df58c57f489a5efcb80fdea840

    • SHA256

      a90fa3c9213b835866a288ab034f54238293ba2777150044bf2929c77fd7b6ab

    • SHA512

      002b310a063e8471620cd8f2788a6571954d1a23d3ab8cede6f46c3eb4d4162423d9218b65bfd05bbd68285c128f6ee5b50ddebe3b7c8fa361e4b64005ced848

    • SSDEEP

      3072:WXP7vkp29g9zZHlSNCtVmptH9n3U4BkX0qmIhPBHwqW:Wvkpr96pHcfmIhPhwqW

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks