General

  • Target

    4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf

  • Size

    92KB

  • Sample

    250226-dpc69svj18

  • MD5

    3d59714f884dd280807e4947a7b90b1d

  • SHA1

    02640a5f418a98882f6968627931ca0536b6456a

  • SHA256

    4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117

  • SHA512

    6b914ee7d4969e55d68edaf2bfbbe55630b74911ff361036bffd421d5f5e63987fd21674febc65d251590392295648c0d1d1d7c50a08d2a46fd99c170760ad06

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3UyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKEifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.137.193:12345

Targets

    • Target

      4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117.elf

    • Size

      92KB

    • MD5

      3d59714f884dd280807e4947a7b90b1d

    • SHA1

      02640a5f418a98882f6968627931ca0536b6456a

    • SHA256

      4d7f9b4bff58cd493caceb0a612bc59ca3f7157840723e6ac0f78c3c6b26e117

    • SHA512

      6b914ee7d4969e55d68edaf2bfbbe55630b74911ff361036bffd421d5f5e63987fd21674febc65d251590392295648c0d1d1d7c50a08d2a46fd99c170760ad06

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3UyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKEifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks