General

  • Target

    bd21999c5c8ae11e4f3b2d48dbca20de9238cffcae18e314ec24565ef0dd0458.elf

  • Size

    106KB

  • Sample

    250226-e4hkzayny5

  • MD5

    7d3aa4951ece50c977ad658e0e52efb3

  • SHA1

    849afbe95fced89f3918cb54656030cc864e5914

  • SHA256

    bd21999c5c8ae11e4f3b2d48dbca20de9238cffcae18e314ec24565ef0dd0458

  • SHA512

    d202a7668d8d27fc71704229c7eca92a516c964d2b9f25cac14412cfdeb2e1247a4ac6d006eacbf549ff526e39996d71dd4b726a367783eae51dfd57b0179dee

  • SSDEEP

    3072:j6dye4BmJQpphaZw/1vc45AzkSXmdRWaLHgb4:dpphaZcErmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

44.210.138.111:4258

Targets

    • Target

      bd21999c5c8ae11e4f3b2d48dbca20de9238cffcae18e314ec24565ef0dd0458.elf

    • Size

      106KB

    • MD5

      7d3aa4951ece50c977ad658e0e52efb3

    • SHA1

      849afbe95fced89f3918cb54656030cc864e5914

    • SHA256

      bd21999c5c8ae11e4f3b2d48dbca20de9238cffcae18e314ec24565ef0dd0458

    • SHA512

      d202a7668d8d27fc71704229c7eca92a516c964d2b9f25cac14412cfdeb2e1247a4ac6d006eacbf549ff526e39996d71dd4b726a367783eae51dfd57b0179dee

    • SSDEEP

      3072:j6dye4BmJQpphaZw/1vc45AzkSXmdRWaLHgb4:dpphaZcErmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks