Overview

overview

10

Static

static

10

da6a2d0e48...b2.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da6a2d0e481b64336f781b8f9f5b83816b1d1d3fef19907e8c85014c6bf87eb2.elf

  • Size

    113KB

  • Sample

    250226-fgtkdsznz4

  • MD5

    ba20264e5784f53f593fa0895f77c0b2

  • SHA1

    8e9f5d9a92a918f3cd5da0a19d866918edbdcd97

  • SHA256

    da6a2d0e481b64336f781b8f9f5b83816b1d1d3fef19907e8c85014c6bf87eb2

  • SHA512

    b5eda9e190524f64c58ab1c9326e036920604c22558421ab5d5b59ddd91b703c3901924a12ce704859cd850c4aa2c8d2c62d6a0126f086747b14df2d4996904b

  • SSDEEP

    3072:+lXYUNqD9taPtMFxW6IetJ8au49QuTsx6sDlaXo8txAtc4kG7gyqc:hXJM+XWnetJ8au4lG6UytxAtc4n7gyqc

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.18:23

Targets

    • Target

      da6a2d0e481b64336f781b8f9f5b83816b1d1d3fef19907e8c85014c6bf87eb2.elf

    • Size

      113KB

    • MD5

      ba20264e5784f53f593fa0895f77c0b2

    • SHA1

      8e9f5d9a92a918f3cd5da0a19d866918edbdcd97

    • SHA256

      da6a2d0e481b64336f781b8f9f5b83816b1d1d3fef19907e8c85014c6bf87eb2

    • SHA512

      b5eda9e190524f64c58ab1c9326e036920604c22558421ab5d5b59ddd91b703c3901924a12ce704859cd850c4aa2c8d2c62d6a0126f086747b14df2d4996904b

    • SSDEEP

      3072:+lXYUNqD9taPtMFxW6IetJ8au49QuTsx6sDlaXo8txAtc4kG7gyqc:hXJM+XWnetJ8au4lG6UytxAtc4n7gyqc

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks