General

  • Target

    55b5851445811f5b26231a12d43c399eea217a536cbbe25385040549b5fcb93d.elf

  • Size

    123KB

  • Sample

    250226-dnqqzavjx6

  • MD5

    b2e80f786ae23fe0885e300d43ffb993

  • SHA1

    640801f5ca5d43042f26bd2403c4d44b594c9441

  • SHA256

    55b5851445811f5b26231a12d43c399eea217a536cbbe25385040549b5fcb93d

  • SHA512

    ab5ce846e5b33b003cde543bf1eeb49c09cceb2633852cf8fa271aa7da7fd75c0ce4f4cdfe4b2ef6724aa32582982bc7d51d3c7b5415eb7fab0c041b3a7ec70f

  • SSDEEP

    1536:/RHeTECAms/Y8Zm3lKYA43gMJwSkJ8Ep8yDzUh8rmW+IFB1Df11hR/:/R5LqAmgMJM8ECyDw8rmW+IFB1Dt1hR/

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.137.193:12345

Targets

    • Target

      55b5851445811f5b26231a12d43c399eea217a536cbbe25385040549b5fcb93d.elf

    • Size

      123KB

    • MD5

      b2e80f786ae23fe0885e300d43ffb993

    • SHA1

      640801f5ca5d43042f26bd2403c4d44b594c9441

    • SHA256

      55b5851445811f5b26231a12d43c399eea217a536cbbe25385040549b5fcb93d

    • SHA512

      ab5ce846e5b33b003cde543bf1eeb49c09cceb2633852cf8fa271aa7da7fd75c0ce4f4cdfe4b2ef6724aa32582982bc7d51d3c7b5415eb7fab0c041b3a7ec70f

    • SSDEEP

      1536:/RHeTECAms/Y8Zm3lKYA43gMJwSkJ8Ep8yDzUh8rmW+IFB1Df11hR/:/R5LqAmgMJM8ECyDw8rmW+IFB1Dt1hR/

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks