General

  • Target

    e82abe40df84dace0273374654978c3402b1ce517423bff6df227bbf8fd2f10e.elf

  • Size

    156KB

  • Sample

    250227-e8lheswrw4

  • MD5

    99904711224e5a884067f787bdb6bf3e

  • SHA1

    c57fe3f4ec6ec0d1b9da6780dd770a77760f69a9

  • SHA256

    e82abe40df84dace0273374654978c3402b1ce517423bff6df227bbf8fd2f10e

  • SHA512

    5bb058b1f5a8dc2ee44180c9dc9134d4def344b0957bc109b74662deb77720c717ec9d73437d27cc939f61d5d3c3364f2310f9caa6f95d5f3aa9cc898ae6c0b7

  • SSDEEP

    3072:T1g2/eINNlzx2kkQCMOaQcvBdYn1wpV7q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYn1wpV7MmFwfBxE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

185.224.0.148:606

Targets

    • Target

      e82abe40df84dace0273374654978c3402b1ce517423bff6df227bbf8fd2f10e.elf

    • Size

      156KB

    • MD5

      99904711224e5a884067f787bdb6bf3e

    • SHA1

      c57fe3f4ec6ec0d1b9da6780dd770a77760f69a9

    • SHA256

      e82abe40df84dace0273374654978c3402b1ce517423bff6df227bbf8fd2f10e

    • SHA512

      5bb058b1f5a8dc2ee44180c9dc9134d4def344b0957bc109b74662deb77720c717ec9d73437d27cc939f61d5d3c3364f2310f9caa6f95d5f3aa9cc898ae6c0b7

    • SSDEEP

      3072:T1g2/eINNlzx2kkQCMOaQcvBdYn1wpV7q3tmFwfBxKQodn:hg2hNNlzIkk/MOa/bYn1wpV7MmFwfBxE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks