General

  • Target

    3247558a131d9f3edf55268892d4716e7615f425544aaf58174671de00ff9cba.elf

  • Size

    123KB

  • Sample

    250226-c5tzaasrv5

  • MD5

    6d7820c9b436564904104770186aadf5

  • SHA1

    b1f961ce076f3f5cf3586f0987de6d308caf0f46

  • SHA256

    3247558a131d9f3edf55268892d4716e7615f425544aaf58174671de00ff9cba

  • SHA512

    2b86402ea8d9b3424cfad2e66cdcc45fbaeef075274a59e84a205670816d52c8073045c8c4ba1e8f23391989f1fa049251d6c37e141b76a6deec730958e6084a

  • SSDEEP

    1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBeHERLWfRZrmW+i:/a1UW0MZQHPB6RZrmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.137.193:12345

Targets

    • Target

      3247558a131d9f3edf55268892d4716e7615f425544aaf58174671de00ff9cba.elf

    • Size

      123KB

    • MD5

      6d7820c9b436564904104770186aadf5

    • SHA1

      b1f961ce076f3f5cf3586f0987de6d308caf0f46

    • SHA256

      3247558a131d9f3edf55268892d4716e7615f425544aaf58174671de00ff9cba

    • SHA512

      2b86402ea8d9b3424cfad2e66cdcc45fbaeef075274a59e84a205670816d52c8073045c8c4ba1e8f23391989f1fa049251d6c37e141b76a6deec730958e6084a

    • SSDEEP

      1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBeHERLWfRZrmW+i:/a1UW0MZQHPB6RZrmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks