General

  • Target

    318238128.x86.elf

  • Size

    106KB

  • Sample

    250223-mnv55avkt6

  • MD5

    eff583050d8459e83bcd5ceab1fcfb1f

  • SHA1

    d010522bc3eae23063aaf7d1234cd5115cdbe26a

  • SHA256

    4685cfc95825d93fd992b300aa5919433266fb5ba20a44cf220b455816045e9c

  • SHA512

    7730ad10a46d51236c52320fa2cdbfe8a635d2cdd408de6e91b740f7c2681479de4dcf66b9f23f7e2c9571a2df9db4db896d33427ac4495ac43d6643f2d66a61

  • SSDEEP

    3072:j6dye4BmJQVphaZw/1vc4MAzkSXmdRWaLHgb4:dVphaZcvrmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

173.208.190.227:4258

Targets

    • Target

      318238128.x86.elf

    • Size

      106KB

    • MD5

      eff583050d8459e83bcd5ceab1fcfb1f

    • SHA1

      d010522bc3eae23063aaf7d1234cd5115cdbe26a

    • SHA256

      4685cfc95825d93fd992b300aa5919433266fb5ba20a44cf220b455816045e9c

    • SHA512

      7730ad10a46d51236c52320fa2cdbfe8a635d2cdd408de6e91b740f7c2681479de4dcf66b9f23f7e2c9571a2df9db4db896d33427ac4495ac43d6643f2d66a61

    • SSDEEP

      3072:j6dye4BmJQVphaZw/1vc4MAzkSXmdRWaLHgb4:dVphaZcvrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks