Overview

overview

10

Static

static

10

8893Xmi39S.m68k.elf

ubuntu-18.04-amd64

8893Xmi39S.m68k.elf

debian-9-armhf

8893Xmi39S.m68k.elf

debian-9-mips

8893Xmi39S.m68k.elf

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8893Xmi39S.m68k.elf

  • Size

    135KB

  • Sample

    250227-z1962aywbs

  • MD5

    9157bd200d719725f461355ecc60a852

  • SHA1

    ee54d7cbb468abebb584c0426927c7ebd03d56a9

  • SHA256

    8eb609e59ecc2a851ff8f17f61c519e73243af5d93fcb34a937798543c2d18c6

  • SHA512

    fb47b848f73bd4498cd7a74780cf8a8212c635b5b80cadfb787db42a8d1d37115ede863e4a30e871e0ccdbd300a08130b3f0475fd4fe3dfc5a95bf1022ce0300

  • SSDEEP

    3072:aVtFzZy7Oh/L+Im3ZtTDsk4ntyyTXJ38Bo7mgJVqDnNYycwe:aMovm3ZtTQyybJ38Bo7mgJVqDnNYycwe

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

104.234.168.54:5542

Targets

    • Target

      8893Xmi39S.m68k.elf

    • Size

      135KB

    • MD5

      9157bd200d719725f461355ecc60a852

    • SHA1

      ee54d7cbb468abebb584c0426927c7ebd03d56a9

    • SHA256

      8eb609e59ecc2a851ff8f17f61c519e73243af5d93fcb34a937798543c2d18c6

    • SHA512

      fb47b848f73bd4498cd7a74780cf8a8212c635b5b80cadfb787db42a8d1d37115ede863e4a30e871e0ccdbd300a08130b3f0475fd4fe3dfc5a95bf1022ce0300

    • SSDEEP

      3072:aVtFzZy7Oh/L+Im3ZtTDsk4ntyyTXJ38Bo7mgJVqDnNYycwe:aMovm3ZtTQyybJ38Bo7mgJVqDnNYycwe

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks