General

  • Target

    jackmyx86.elf

  • Size

    142KB

  • Sample

    250302-wfr8yazrv7

  • MD5

    be3ae9be9543d62a05af18c9ba0cc27c

  • SHA1

    c36fa9a28e6945e84ef66cb3ba24b91410c6bf72

  • SHA256

    6a0a99ff300be41c905234593ed3abb69b8bb5c9c48449612187036d33c367a0

  • SHA512

    a73ce457e830503eaeb2ba10cb1977238fbf57042eac2f5fbe90af52fa0b7689fb617458cf4817ae8b32aefaa95adcd91a0728816b4ded32b207b5884e811034

  • SSDEEP

    3072:2DeURnmNKGRUvs4gh5CbsjqutJ8adPF4KQTjsgRN/AijobnTritGmS1jk:bWE4gDaRutJ8adPF4f17jobnTriImS1A

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      jackmyx86.elf

    • Size

      142KB

    • MD5

      be3ae9be9543d62a05af18c9ba0cc27c

    • SHA1

      c36fa9a28e6945e84ef66cb3ba24b91410c6bf72

    • SHA256

      6a0a99ff300be41c905234593ed3abb69b8bb5c9c48449612187036d33c367a0

    • SHA512

      a73ce457e830503eaeb2ba10cb1977238fbf57042eac2f5fbe90af52fa0b7689fb617458cf4817ae8b32aefaa95adcd91a0728816b4ded32b207b5884e811034

    • SSDEEP

      3072:2DeURnmNKGRUvs4gh5CbsjqutJ8adPF4KQTjsgRN/AijobnTritGmS1jk:bWE4gDaRutJ8adPF4f17jobnTriImS1A

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks