General

  • Target

    jackmyi686.elf

  • Size

    122KB

  • Sample

    250302-wfr8yazxbw

  • MD5

    1d929ae8de30069ddb4f285602d8978f

  • SHA1

    bc87187ca8fb502746956f7e399ea17cecd06c17

  • SHA256

    8beb1d3622421d2c846b56b18de9b0f9911afdd1478a22a0a76f05601b692bf2

  • SHA512

    a5eb3ea56f89cc1b95650e94df75162b7d73f3c48ce4c451e00d67a8da57c7dcbb9a84e614c301bddd7fe057cea5295e04938fef816486e01a9e468cbdfa40de

  • SSDEEP

    3072:oPrmFC7HQ66abGWZeEuetJ8add9QzTsF5z6FmW4V+rXCGcgplK:ozP9CeeEuetJ8addQEHW4V+rXBcgplK

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

162.0.214.70:1111

Targets

    • Target

      jackmyi686.elf

    • Size

      122KB

    • MD5

      1d929ae8de30069ddb4f285602d8978f

    • SHA1

      bc87187ca8fb502746956f7e399ea17cecd06c17

    • SHA256

      8beb1d3622421d2c846b56b18de9b0f9911afdd1478a22a0a76f05601b692bf2

    • SHA512

      a5eb3ea56f89cc1b95650e94df75162b7d73f3c48ce4c451e00d67a8da57c7dcbb9a84e614c301bddd7fe057cea5295e04938fef816486e01a9e468cbdfa40de

    • SSDEEP

      3072:oPrmFC7HQ66abGWZeEuetJ8add9QzTsF5z6FmW4V+rXCGcgplK:ozP9CeeEuetJ8addQEHW4V+rXBcgplK

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks