General

  • Target

    x-8.6-.s.elf

  • Size

    92KB

  • Sample

    250308-mec8ysvqx7

  • MD5

    41885f88650ea6cab99dcb0e8dc8472c

  • SHA1

    beecb856cbceb84fcf5ca4455c4405e1a45a51ea

  • SHA256

    fee2fe5dcd3bedb29a505b7677820d5f1aff26cb70e6095e5b015e5d7449a735

  • SHA512

    7182660b97365c65752bd4a0fcabe5400a372abea99506296a88ed54b6eff85f4eb8964024e2b535ec1a1983cb36e3fd5750c3ee2d0b914fff454ce18026cb0a

  • SSDEEP

    1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3XyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKHifUm/KWOXFE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:12345

Targets

    • Target

      x-8.6-.s.elf

    • Size

      92KB

    • MD5

      41885f88650ea6cab99dcb0e8dc8472c

    • SHA1

      beecb856cbceb84fcf5ca4455c4405e1a45a51ea

    • SHA256

      fee2fe5dcd3bedb29a505b7677820d5f1aff26cb70e6095e5b015e5d7449a735

    • SHA512

      7182660b97365c65752bd4a0fcabe5400a372abea99506296a88ed54b6eff85f4eb8964024e2b535ec1a1983cb36e3fd5750c3ee2d0b914fff454ce18026cb0a

    • SSDEEP

      1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK3XyPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKHifUm/KWOXFE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks