General

  • Target

    ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2.elf

  • Size

    97KB

  • Sample

    250219-gprlfaypdw

  • MD5

    c16c1a8c7cc13ad721eb2e399958ca6a

  • SHA1

    12b0550a80ce2a65ef82ade7b84ae27df56b7b66

  • SHA256

    ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2

  • SHA512

    267404dcdf4949ff4d006b336508a380975c67bfda5af24dcfea1f971a4994670b28c7b607abd289112a256a2e5153d8c1afb117d8c980162fb60dbab16a43b2

  • SSDEEP

    3072:VhTXBNU2Uh917j8g8jHzCBCUAW0fx9fmDTH2Iinf0OzTyoQQub:xNxu917j8g8jGmW89AH2Iinf0OzTyoQ7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.74.222.38:8080

Targets

    • Target

      ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2.elf

    • Size

      97KB

    • MD5

      c16c1a8c7cc13ad721eb2e399958ca6a

    • SHA1

      12b0550a80ce2a65ef82ade7b84ae27df56b7b66

    • SHA256

      ebf742b55a85955424ecc3864ce3248b5ce63263d5237e18490a12c723ad6eb2

    • SHA512

      267404dcdf4949ff4d006b336508a380975c67bfda5af24dcfea1f971a4994670b28c7b607abd289112a256a2e5153d8c1afb117d8c980162fb60dbab16a43b2

    • SSDEEP

      3072:VhTXBNU2Uh917j8g8jHzCBCUAW0fx9fmDTH2Iinf0OzTyoQQub:xNxu917j8g8jGmW89AH2Iinf0OzTyoQ7

    Score
    7/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v15

Tasks