General

  • Target

    66d75d65130435af565c03f921cecc2a647545c7577eedd92c314023fbdb1821.elf

  • Size

    141KB

  • Sample

    250301-dy2wzsx1bx

  • MD5

    5abd643f727d4908634fc6a26f8acb85

  • SHA1

    56c32d46d0df70bd117b917a85fd996592bbbfcd

  • SHA256

    66d75d65130435af565c03f921cecc2a647545c7577eedd92c314023fbdb1821

  • SHA512

    a54baa02e678b847ee8db7fcaef59b1538942e4cacca1bb304b01e3c458b31a686dbf8558a70e3ffcc8135f0e6158707cfa430fc6c8798f5a6a5cbf065909a2e

  • SSDEEP

    3072:sGGNZfCos2pA4FCS5hvikTam0/5ApYADn:hACyK40S5hvi9m0/5ASADn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.87.246.149:4258

Targets

    • Target

      66d75d65130435af565c03f921cecc2a647545c7577eedd92c314023fbdb1821.elf

    • Size

      141KB

    • MD5

      5abd643f727d4908634fc6a26f8acb85

    • SHA1

      56c32d46d0df70bd117b917a85fd996592bbbfcd

    • SHA256

      66d75d65130435af565c03f921cecc2a647545c7577eedd92c314023fbdb1821

    • SHA512

      a54baa02e678b847ee8db7fcaef59b1538942e4cacca1bb304b01e3c458b31a686dbf8558a70e3ffcc8135f0e6158707cfa430fc6c8798f5a6a5cbf065909a2e

    • SSDEEP

      3072:sGGNZfCos2pA4FCS5hvikTam0/5ApYADn:hACyK40S5hvi9m0/5ASADn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks