General

  • Target

    4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b.elf

  • Size

    150KB

  • Sample

    250221-c6v8qs1mgp

  • MD5

    d3ab6bb3ffa8a92d9563cab807038bd9

  • SHA1

    5e458a610abedc9d5687d005cf0b5e199b9d2bf9

  • SHA256

    4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b

  • SHA512

    ed1734bb0a72f05fd6c0fcd29aa1af49f0d020c31fc9b96a24a502cb4870b01de7b7136a207ee160c024a6c2ac68569994deebad82a6755c35552e757936f3cc

  • SSDEEP

    3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGU2WV7ldmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

64.188.99.14:4258

Targets

    • Target

      4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b.elf

    • Size

      150KB

    • MD5

      d3ab6bb3ffa8a92d9563cab807038bd9

    • SHA1

      5e458a610abedc9d5687d005cf0b5e199b9d2bf9

    • SHA256

      4be795fa4fc3ed3d66aaddb6341024ad98e25b007f6f0aa180e4b263d215c03b

    • SHA512

      ed1734bb0a72f05fd6c0fcd29aa1af49f0d020c31fc9b96a24a502cb4870b01de7b7136a207ee160c024a6c2ac68569994deebad82a6755c35552e757936f3cc

    • SSDEEP

      3072:Tdbmn8aAEHqgSkano1DTAc5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDT95hWTGU2WV7ldmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks