General

  • Target

    499c7673bad0592c6204d04eb65ace35d4495681f565b9c9b2af71c3995d70fc.elf

  • Size

    112KB

  • Sample

    250222-dy7r8sypx5

  • MD5

    242f71a5342c4a7933d085d461aa2247

  • SHA1

    03950315e39bb463ceba4756c2f68fa77fb84a36

  • SHA256

    499c7673bad0592c6204d04eb65ace35d4495681f565b9c9b2af71c3995d70fc

  • SHA512

    aa1a35ea5ee66beee0e3014d337309441f06fa74d068cbfd46d2e376ab138e304e08f95d4e707e11330a27d0f1bdc50a2c203d8167958460477290a74300b806

  • SSDEEP

    3072:0VW0fIHznlZA5h50qBkxmkizF9GhsRiAe:0APT3A5h50ZxmkizF9GhsRiAe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      499c7673bad0592c6204d04eb65ace35d4495681f565b9c9b2af71c3995d70fc.elf

    • Size

      112KB

    • MD5

      242f71a5342c4a7933d085d461aa2247

    • SHA1

      03950315e39bb463ceba4756c2f68fa77fb84a36

    • SHA256

      499c7673bad0592c6204d04eb65ace35d4495681f565b9c9b2af71c3995d70fc

    • SHA512

      aa1a35ea5ee66beee0e3014d337309441f06fa74d068cbfd46d2e376ab138e304e08f95d4e707e11330a27d0f1bdc50a2c203d8167958460477290a74300b806

    • SSDEEP

      3072:0VW0fIHznlZA5h50qBkxmkizF9GhsRiAe:0APT3A5h50ZxmkizF9GhsRiAe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks