General

  • Target

    ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf

  • Size

    150KB

  • Sample

    250219-gyhpws1ms2

  • MD5

    d27ba0aebc1887fb23c43187a1eb3d95

  • SHA1

    aab111ba9f35ee1fbca34f808a05a7c31252c252

  • SHA256

    ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d

  • SHA512

    c2eea705d332417b7a20d3451a4077dd10bd05d1304296b9ccfdd5c137e15d584961d9b992d82e5d6aaa0fd4c90b4e2d202d6ca855fe4766b9031d28cd95d0a3

  • SSDEEP

    3072:7qRHyUF4+esvApryQv03URxuZq+1uPNd5R:7qRHy5+eIApyLURxuZq+1uPNd5R

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.74.222.38:8080

Targets

    • Target

      ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d.elf

    • Size

      150KB

    • MD5

      d27ba0aebc1887fb23c43187a1eb3d95

    • SHA1

      aab111ba9f35ee1fbca34f808a05a7c31252c252

    • SHA256

      ef22559baf89f4bc9af7222a687edf9e91b8e69fe743ae25559f5c6b61d9362d

    • SHA512

      c2eea705d332417b7a20d3451a4077dd10bd05d1304296b9ccfdd5c137e15d584961d9b992d82e5d6aaa0fd4c90b4e2d202d6ca855fe4766b9031d28cd95d0a3

    • SSDEEP

      3072:7qRHyUF4+esvApryQv03URxuZq+1uPNd5R:7qRHy5+eIApyLURxuZq+1uPNd5R

    Score
    7/10
    • Writes DNS configuration

      Writes data to DNS resolver config file.

MITRE ATT&CK Enterprise v15

Tasks