General

  • Target

    0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac.elf

  • Size

    116KB

  • Sample

    250222-c4n2msyjw4

  • MD5

    99e5bf13cebd5bb2d4724945341c0c68

  • SHA1

    7fd10f2a46280617b1c8707ad558970a97edee13

  • SHA256

    0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac

  • SHA512

    0a0a48654c3a2418311354714944b1abd89a55ab964191633a8cdc68ce82fa1d64cfa7d46d5d1870ce466790c7b363ec5aceee962659e5a3c2bba528c91c2a7a

  • SSDEEP

    3072:Yd5adFfNQamBJl1OL5hudKRvF2/bBbmOQUJ1UXpTn:E5adFf4OL5hudK9FabBbmOQUJ1apTn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac.elf

    • Size

      116KB

    • MD5

      99e5bf13cebd5bb2d4724945341c0c68

    • SHA1

      7fd10f2a46280617b1c8707ad558970a97edee13

    • SHA256

      0fc4ee58bb0d24f0d01d173a669b4e5a9822ef6aca4247d86473e86e63cbddac

    • SHA512

      0a0a48654c3a2418311354714944b1abd89a55ab964191633a8cdc68ce82fa1d64cfa7d46d5d1870ce466790c7b363ec5aceee962659e5a3c2bba528c91c2a7a

    • SSDEEP

      3072:Yd5adFfNQamBJl1OL5hudKRvF2/bBbmOQUJ1UXpTn:E5adFf4OL5hudK9FabBbmOQUJ1apTn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks