General

  • Target

    3a4fc36dee8b7024bedec2c2345a7ac8a7d54b65fa000eed778c70d7443d8402.elf

  • Size

    154KB

  • Sample

    250226-dd779stmw7

  • MD5

    fb60037e32b5ef7ea135dff35b6114ea

  • SHA1

    f95f587f124d66b985611ed9d571d8622a481676

  • SHA256

    3a4fc36dee8b7024bedec2c2345a7ac8a7d54b65fa000eed778c70d7443d8402

  • SHA512

    65a3c8ee7e26d734169e850b4c11f724f2b6d23b96458200b8e8994760054114562aacae2f78d70900e6516fd80dff2787284a64bf2778130c54cb64ac002c8b

  • SSDEEP

    3072:vSdcECL4GHmQmtLdRMVia+ZcOTmGUUetJ8au49Quhsbu9Yaa7O+89zF5me/Sxomj:mLLMoaK5UUetJ8au4lVYaa7O+GmyzQ0U

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.18:23

Targets

    • Target

      3a4fc36dee8b7024bedec2c2345a7ac8a7d54b65fa000eed778c70d7443d8402.elf

    • Size

      154KB

    • MD5

      fb60037e32b5ef7ea135dff35b6114ea

    • SHA1

      f95f587f124d66b985611ed9d571d8622a481676

    • SHA256

      3a4fc36dee8b7024bedec2c2345a7ac8a7d54b65fa000eed778c70d7443d8402

    • SHA512

      65a3c8ee7e26d734169e850b4c11f724f2b6d23b96458200b8e8994760054114562aacae2f78d70900e6516fd80dff2787284a64bf2778130c54cb64ac002c8b

    • SSDEEP

      3072:vSdcECL4GHmQmtLdRMVia+ZcOTmGUUetJ8au49Quhsbu9Yaa7O+89zF5me/Sxomj:mLLMoaK5UUetJ8au4lVYaa7O+GmyzQ0U

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks