General

  • Target

    d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936.elf

  • Size

    79KB

  • Sample

    250221-ewbsfssrgp

  • MD5

    cb59acf08eae97467b1ecb66c06c34d6

  • SHA1

    9a6c6a1429a6071addbd00e23c39bc43f2d115f7

  • SHA256

    d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936

  • SHA512

    7a9c4c198e50a4315fba54525d8535c0397655f912b98e75a62e013b849aaafa472ec10ad1854d7312cb1243aaa8a5ce901439fe5b353df7930e17516a7b5a35

  • SSDEEP

    1536:Yof4eXCUCUoRLKHnmrTH5bE9ohl/9vrklFmrJHiPJ4mLItVOCjXZRshS:YoFCUCUoR2Hnm3ZbcohZ9jttiPemUtV7

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

15.204.128.30:6140

Targets

    • Target

      d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936.elf

    • Size

      79KB

    • MD5

      cb59acf08eae97467b1ecb66c06c34d6

    • SHA1

      9a6c6a1429a6071addbd00e23c39bc43f2d115f7

    • SHA256

      d9748509c0799d61ab3dffdc9513657865d41ee8340654c5983f5a71a994d936

    • SHA512

      7a9c4c198e50a4315fba54525d8535c0397655f912b98e75a62e013b849aaafa472ec10ad1854d7312cb1243aaa8a5ce901439fe5b353df7930e17516a7b5a35

    • SSDEEP

      1536:Yof4eXCUCUoRLKHnmrTH5bE9ohl/9vrklFmrJHiPJ4mLItVOCjXZRshS:YoFCUCUoR2Hnm3ZbcohZ9jttiPemUtV7

    Score
    7/10
    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

MITRE ATT&CK Matrix

Tasks