General

  • Target

    6fc980aa734c027d6e537ee2f58cb95706862c323233e95eb6d2495a17a9c8bf.elf

  • Size

    112KB

  • Sample

    250226-d557zswlt3

  • MD5

    1c7da84f7aada3cb5b911be38c9a0832

  • SHA1

    d00854b6f6210f7880ebaeb60487a24ed8b12132

  • SHA256

    6fc980aa734c027d6e537ee2f58cb95706862c323233e95eb6d2495a17a9c8bf

  • SHA512

    cdedee7593e0313e4fdc4f82eae14ef788195ef9154cad0326f8b5916c2c9898df8a1397a1151636a56f1bbe122dcfe5264b5a57f4bfde4a34d008c7c99a7c27

  • SSDEEP

    3072:0VW0fIHznlZe5h50qBkxmkizF9GhsRiAe:0APT3e5h50ZxmkizF9GhsRiAe

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.18:1111

Targets

    • Target

      6fc980aa734c027d6e537ee2f58cb95706862c323233e95eb6d2495a17a9c8bf.elf

    • Size

      112KB

    • MD5

      1c7da84f7aada3cb5b911be38c9a0832

    • SHA1

      d00854b6f6210f7880ebaeb60487a24ed8b12132

    • SHA256

      6fc980aa734c027d6e537ee2f58cb95706862c323233e95eb6d2495a17a9c8bf

    • SHA512

      cdedee7593e0313e4fdc4f82eae14ef788195ef9154cad0326f8b5916c2c9898df8a1397a1151636a56f1bbe122dcfe5264b5a57f4bfde4a34d008c7c99a7c27

    • SSDEEP

      3072:0VW0fIHznlZe5h50qBkxmkizF9GhsRiAe:0APT3e5h50ZxmkizF9GhsRiAe

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks