General

  • Target

    cd117b3f1be3ae2ab9fdf8e13460971549243319cfb13b3f8b6dca01c82722c7.elf

  • Size

    108KB

  • Sample

    250227-e3q6qavxd1

  • MD5

    915b1252c440e860b1e6fb0d0e6f8953

  • SHA1

    dfea5c3a334ea62dca18dfd60e0f9c003073569f

  • SHA256

    cd117b3f1be3ae2ab9fdf8e13460971549243319cfb13b3f8b6dca01c82722c7

  • SHA512

    779f45116b54a8571e1e8e8c44494c3c11a428908349db87d01c979fd7a9d41a857d1a4ab7647318c738bff22cb775605bbc92586c60161ec62a7878976648e5

  • SSDEEP

    3072:3umlo71DhFGYvuoIp+/FXwOTumTT3gxHuW4:JoIcrumTT3gxuW4

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.148:606

Targets

    • Target

      cd117b3f1be3ae2ab9fdf8e13460971549243319cfb13b3f8b6dca01c82722c7.elf

    • Size

      108KB

    • MD5

      915b1252c440e860b1e6fb0d0e6f8953

    • SHA1

      dfea5c3a334ea62dca18dfd60e0f9c003073569f

    • SHA256

      cd117b3f1be3ae2ab9fdf8e13460971549243319cfb13b3f8b6dca01c82722c7

    • SHA512

      779f45116b54a8571e1e8e8c44494c3c11a428908349db87d01c979fd7a9d41a857d1a4ab7647318c738bff22cb775605bbc92586c60161ec62a7878976648e5

    • SSDEEP

      3072:3umlo71DhFGYvuoIp+/FXwOTumTT3gxHuW4:JoIcrumTT3gxuW4

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks