General

  • Target

    jackmyarmv4.elf

  • Size

    150KB

  • Sample

    250302-wfr8yazxaz

  • MD5

    819df43b4e988346b5a4a3bf8f698475

  • SHA1

    2b5546e8f65a4c3078514877532610878aceb42d

  • SHA256

    94cab9304474a7cb096a2dc91744d562bed82433a4c82be0536bcb46c256cf40

  • SHA512

    454a0f08c4827eaff918aa6580fbbafd25721d8d52dcb1b6636beb1fbde87f886bc2de83ee3e3ed98e7bcb8f77da967ceb5a89363a88bf10210fef4fd01611f8

  • SSDEEP

    3072:S/HRpT57Y11PAudDA60kw0mgABfvrupBetJ8add9Qzhsq8RzOmcwp5Lw+QdULWvX:ki0d0mg4DupBetJ8addQbKzF5Lw+QdUQ

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      jackmyarmv4.elf

    • Size

      150KB

    • MD5

      819df43b4e988346b5a4a3bf8f698475

    • SHA1

      2b5546e8f65a4c3078514877532610878aceb42d

    • SHA256

      94cab9304474a7cb096a2dc91744d562bed82433a4c82be0536bcb46c256cf40

    • SHA512

      454a0f08c4827eaff918aa6580fbbafd25721d8d52dcb1b6636beb1fbde87f886bc2de83ee3e3ed98e7bcb8f77da967ceb5a89363a88bf10210fef4fd01611f8

    • SSDEEP

      3072:S/HRpT57Y11PAudDA60kw0mgABfvrupBetJ8add9Qzhsq8RzOmcwp5Lw+QdULWvX:ki0d0mg4DupBetJ8addQbKzF5Lw+QdUQ

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks