General

  • Target

    strix.arm5.elf

  • Size

    204KB

  • Sample

    250223-wdfr5atley

  • MD5

    afa8bb148a4e1cf7b7de063c13c19759

  • SHA1

    a3434bcbe1dfbf49b9b6a9bbfaeb98a9dd5ed38d

  • SHA256

    d4caec94c6e4d6750c0ecda3ce3db5377d8180fffc70feff6604500a475f3af3

  • SHA512

    6b264456f0f6d3981c19baa186fa76eaa68fe6f3777ce7ab90027ce5cf7775aec2cf1be5158f493ae98e7418697a3898cfbdb5f1ecffe124a80d53d0a6563d86

  • SSDEEP

    6144:NtpKaECwXhQIFzkLj5ha26nWgV7Pi2m0wfB5RyAn:NtpKaECwXhQkU5haMiu2m0mB5RyAn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.66:5334

Targets

    • Target

      strix.arm5.elf

    • Size

      204KB

    • MD5

      afa8bb148a4e1cf7b7de063c13c19759

    • SHA1

      a3434bcbe1dfbf49b9b6a9bbfaeb98a9dd5ed38d

    • SHA256

      d4caec94c6e4d6750c0ecda3ce3db5377d8180fffc70feff6604500a475f3af3

    • SHA512

      6b264456f0f6d3981c19baa186fa76eaa68fe6f3777ce7ab90027ce5cf7775aec2cf1be5158f493ae98e7418697a3898cfbdb5f1ecffe124a80d53d0a6563d86

    • SSDEEP

      6144:NtpKaECwXhQIFzkLj5ha26nWgV7Pi2m0wfB5RyAn:NtpKaECwXhQkU5haMiu2m0mB5RyAn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks