General

  • Target

    b71d9eea236ef26ce7ddb0ff9fa959282be87fe218944692995b8b3675cdb4c1.elf

  • Size

    112KB

  • Sample

    250301-etnz1azscy

  • MD5

    44857da4a4718a49866d979d4d675cd5

  • SHA1

    13455598ae5f1764b68b3c9baa385dac474b1bdf

  • SHA256

    b71d9eea236ef26ce7ddb0ff9fa959282be87fe218944692995b8b3675cdb4c1

  • SHA512

    05e22c789bab9b81f5d2f09b50d72fb389c53aa7d6c7fd7bbbafc175b9a2c0b4a2bc2e1b3b464595c575224d3d049e79ebf8899e9e4a52b63fce1fcc3645d5b5

  • SSDEEP

    3072:vhfviOui5FCRSUaVejY68tB5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtB5hqSr3hGm0Qxu1rWIn

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.87.246.149:4258

Targets

    • Target

      b71d9eea236ef26ce7ddb0ff9fa959282be87fe218944692995b8b3675cdb4c1.elf

    • Size

      112KB

    • MD5

      44857da4a4718a49866d979d4d675cd5

    • SHA1

      13455598ae5f1764b68b3c9baa385dac474b1bdf

    • SHA256

      b71d9eea236ef26ce7ddb0ff9fa959282be87fe218944692995b8b3675cdb4c1

    • SHA512

      05e22c789bab9b81f5d2f09b50d72fb389c53aa7d6c7fd7bbbafc175b9a2c0b4a2bc2e1b3b464595c575224d3d049e79ebf8899e9e4a52b63fce1fcc3645d5b5

    • SSDEEP

      3072:vhfviOui5FCRSUaVejY68tB5hqSr3hGm0Qxu1bXWIn:pvfUQVejYXtB5hqSr3hGm0Qxu1rWIn

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks