General

  • Target

    jackmyi586.elf

  • Size

    122KB

  • Sample

    250302-wfr8yazrv9

  • MD5

    609b85c098d864c629b7e78debc5108d

  • SHA1

    10c2cb98c6ae0bdb5d52d8d740e765b3e74e5a86

  • SHA256

    f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a

  • SHA512

    da4bd24cbd39aafc3682ca7730f3a1f60f4b23d619161805537100aeeb84d7ec4391e4428846591f7c22b2210c7fcaf11ce0d05b1021081670608966701c1ba9

  • SSDEEP

    3072:N2ZLKMOPOXMjV99bdrdJ1etJ8add9QzTsctQ7zmlw74V+rXCGcgplK:NGh343jRJ1etJ8addQTtQvmu74V+rXBq

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      jackmyi586.elf

    • Size

      122KB

    • MD5

      609b85c098d864c629b7e78debc5108d

    • SHA1

      10c2cb98c6ae0bdb5d52d8d740e765b3e74e5a86

    • SHA256

      f419e1c3058d8eb73c33ed7506430774255e85e4c3766bc10cd7e4c308d93d1a

    • SHA512

      da4bd24cbd39aafc3682ca7730f3a1f60f4b23d619161805537100aeeb84d7ec4391e4428846591f7c22b2210c7fcaf11ce0d05b1021081670608966701c1ba9

    • SSDEEP

      3072:N2ZLKMOPOXMjV99bdrdJ1etJ8add9QzTsctQ7zmlw74V+rXCGcgplK:NGh343jRJ1etJ8addQTtQvmu74V+rXBq

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks