General

  • Target

    efb7c3a4e5fd61c890c19f1863106ca95a95732a483f8e80c2c2fe92bfe64421.elf

  • Size

    139KB

  • Sample

    250219-grdglaypgy

  • MD5

    9574c6e15b3cd6a99216d69a5e67098c

  • SHA1

    508e4c6e40bbdbe55a317f658da3c572fc716513

  • SHA256

    efb7c3a4e5fd61c890c19f1863106ca95a95732a483f8e80c2c2fe92bfe64421

  • SHA512

    509a0df503d97d781fb4c14843fa9d343a70f44093919bcbdf69c9a113ce53c6d8834e4e99913c83f8cc572af0ce46ba427183fedb80e0fa2f7ab433e35303a5

  • SSDEEP

    3072:nVfyQ+d+pceQGf3bssaXv2hWOiwTteFrwZoPI3njddZ4RemydQCYMhEFg:TbssaXv2hoHrVPI3LuYmydQCYMhEFg

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.74.222.38:8080

Targets

    • Target

      efb7c3a4e5fd61c890c19f1863106ca95a95732a483f8e80c2c2fe92bfe64421.elf

    • Size

      139KB

    • MD5

      9574c6e15b3cd6a99216d69a5e67098c

    • SHA1

      508e4c6e40bbdbe55a317f658da3c572fc716513

    • SHA256

      efb7c3a4e5fd61c890c19f1863106ca95a95732a483f8e80c2c2fe92bfe64421

    • SHA512

      509a0df503d97d781fb4c14843fa9d343a70f44093919bcbdf69c9a113ce53c6d8834e4e99913c83f8cc572af0ce46ba427183fedb80e0fa2f7ab433e35303a5

    • SSDEEP

      3072:nVfyQ+d+pceQGf3bssaXv2hWOiwTteFrwZoPI3njddZ4RemydQCYMhEFg:TbssaXv2hoHrVPI3LuYmydQCYMhEFg

    Score
    7/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v15

Tasks