Overview

overview

10

Static

static

10

felkawtf.sh4.elf

ubuntu-18.04-amd64

felkawtf.sh4.elf

debian-9-armhf

felkawtf.sh4.elf

debian-9-mips

felkawtf.sh4.elf

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    felkawtf.sh4.elf

  • Size

    84KB

  • Sample

    250220-ztv4javngj

  • MD5

    327503b2c62c2e8fd56aff71c3a889b0

  • SHA1

    5f9ae984aca32a4538b922888bb0c5fb787d68ba

  • SHA256

    7faf18920e793fa9e63407a9bd8538d42b515868ec747de1fa9829a78b68dee6

  • SHA512

    0e3a5767565b57fcd1532d848f45ab27004991e33581e48e065da06106347d810bcc912904a20d6b4928fab336b796ffffd206f382ebb88bbfb6cd8ed76ae852

  • SSDEEP

    1536:U9HlFKAuUXst398t+ry1FZCDFkkAHmj0VqYLeRR/gQ:eFMAs39rQ30Fk/mj0VqYqRR/gQ

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

15.204.128.30:6140

Targets

    • Target

      felkawtf.sh4.elf

    • Size

      84KB

    • MD5

      327503b2c62c2e8fd56aff71c3a889b0

    • SHA1

      5f9ae984aca32a4538b922888bb0c5fb787d68ba

    • SHA256

      7faf18920e793fa9e63407a9bd8538d42b515868ec747de1fa9829a78b68dee6

    • SHA512

      0e3a5767565b57fcd1532d848f45ab27004991e33581e48e065da06106347d810bcc912904a20d6b4928fab336b796ffffd206f382ebb88bbfb6cd8ed76ae852

    • SSDEEP

      1536:U9HlFKAuUXst398t+ry1FZCDFkkAHmj0VqYLeRR/gQ:eFMAs39rQ30Fk/mj0VqYqRR/gQ

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks