General

  • Target

    d2a84984634ffcb72be5116be11e9fa18ad64bd482ffd68fb13a9d4165058cc4.elf

  • Size

    106KB

  • Sample

    250226-fd8vxazms3

  • MD5

    41c5ddb02169741a17bc28a574bf4ff2

  • SHA1

    f92edf6bc1bf8820e65199d2fb8942a3c136e85a

  • SHA256

    d2a84984634ffcb72be5116be11e9fa18ad64bd482ffd68fb13a9d4165058cc4

  • SHA512

    ffc9e6a8faab4a6003f194a360e7aaf4367e7471db15e7ccf2454d364689002b3bb46df736358926f1132003ab335781d5dec39b87f433e02cdeded070464a4a

  • SSDEEP

    3072:j6dye4BmJQvphaZw/1vc4LAzkSXmdRWaLHgb4:dvphaZcOrmdRWaDgb4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

95.164.52.33:4258

Targets

    • Target

      d2a84984634ffcb72be5116be11e9fa18ad64bd482ffd68fb13a9d4165058cc4.elf

    • Size

      106KB

    • MD5

      41c5ddb02169741a17bc28a574bf4ff2

    • SHA1

      f92edf6bc1bf8820e65199d2fb8942a3c136e85a

    • SHA256

      d2a84984634ffcb72be5116be11e9fa18ad64bd482ffd68fb13a9d4165058cc4

    • SHA512

      ffc9e6a8faab4a6003f194a360e7aaf4367e7471db15e7ccf2454d364689002b3bb46df736358926f1132003ab335781d5dec39b87f433e02cdeded070464a4a

    • SSDEEP

      3072:j6dye4BmJQvphaZw/1vc4LAzkSXmdRWaLHgb4:dvphaZcOrmdRWaDgb4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks