General

  • Target

    a7234b8cf96dc77b95260ff424d2e69cacf5592f58b683a716e9953c4f82160b.elf

  • Size

    166KB

  • Sample

    250224-dyjemszrz6

  • MD5

    b50e392accf1e6f91a340794b6bacab4

  • SHA1

    5c7e4576709b657505606bc4f7e4345730ee0f37

  • SHA256

    a7234b8cf96dc77b95260ff424d2e69cacf5592f58b683a716e9953c4f82160b

  • SHA512

    c442c111f686f6b08bcb956dbcbe741a16f2cfae818578f21004f7767538413e970272138d17344a746e66a9307aa32d1c2d8cc997d0132036da84b10ef0e948

  • SSDEEP

    3072:/yd1BbL85baUnejuog78FCJ7E5hM1DsH62c7ZxmfQOYbr5Wn:anUbaGejUJ7E5hvH67xmfQOYbr5Wn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

37.44.238.66:5334

Targets

    • Target

      a7234b8cf96dc77b95260ff424d2e69cacf5592f58b683a716e9953c4f82160b.elf

    • Size

      166KB

    • MD5

      b50e392accf1e6f91a340794b6bacab4

    • SHA1

      5c7e4576709b657505606bc4f7e4345730ee0f37

    • SHA256

      a7234b8cf96dc77b95260ff424d2e69cacf5592f58b683a716e9953c4f82160b

    • SHA512

      c442c111f686f6b08bcb956dbcbe741a16f2cfae818578f21004f7767538413e970272138d17344a746e66a9307aa32d1c2d8cc997d0132036da84b10ef0e948

    • SSDEEP

      3072:/yd1BbL85baUnejuog78FCJ7E5hM1DsH62c7ZxmfQOYbr5Wn:anUbaGejUJ7E5hvH67xmfQOYbr5Wn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks