General

  • Target

    ac40fc9c2bb9d4131711ef5f14d78642fdcd9573ecc72f648622cd9612d1d3f3.elf

  • Size

    150KB

  • Sample

    250224-dztxrsypay

  • MD5

    5e162618e29631eb9eb7fab8f2ad99d7

  • SHA1

    3c67ef7e2d6fa74472e317661cafeb35f720c457

  • SHA256

    ac40fc9c2bb9d4131711ef5f14d78642fdcd9573ecc72f648622cd9612d1d3f3

  • SHA512

    8a3f956a30603ad7e6414b82dc9640dc84f2c1225ece48d1df4f918a4638a8c562c2144aeead93e66cd764dcecd2f928077b69c78d056b8afc10d31f37e042de

  • SSDEEP

    3072:/dQbnQao0HawD+zQNz7gc5hZ1GZWYxVkxHmpwTsL/QMyn:VmQao0H3D9z7V5hZ1GZWYxVkNmpwTsLS

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

173.208.190.227:4258

Targets

    • Target

      ac40fc9c2bb9d4131711ef5f14d78642fdcd9573ecc72f648622cd9612d1d3f3.elf

    • Size

      150KB

    • MD5

      5e162618e29631eb9eb7fab8f2ad99d7

    • SHA1

      3c67ef7e2d6fa74472e317661cafeb35f720c457

    • SHA256

      ac40fc9c2bb9d4131711ef5f14d78642fdcd9573ecc72f648622cd9612d1d3f3

    • SHA512

      8a3f956a30603ad7e6414b82dc9640dc84f2c1225ece48d1df4f918a4638a8c562c2144aeead93e66cd764dcecd2f928077b69c78d056b8afc10d31f37e042de

    • SSDEEP

      3072:/dQbnQao0HawD+zQNz7gc5hZ1GZWYxVkxHmpwTsL/QMyn:VmQao0H3D9z7V5hZ1GZWYxVkNmpwTsLS

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks