General

  • Target

    x-3.2-.opticus.elf

  • Size

    84KB

  • Sample

    250309-jc11fsywfx

  • MD5

    7273c44b1fa4c67d578b20201daf3a08

  • SHA1

    6b67d21c5e6d1dada3bb1a6fb144af78a946a16c

  • SHA256

    e9ab4c5775283235c852180f5f485057b92dc3fe9cb73ee56cadc081d0bc4f5a

  • SHA512

    3b6daf2f7dc74ddc1dec29198328006ea623fda271fa7e0da8239cb2c1820b24a94c8824ab501e051b70bfc3971b3e630858af328a38b7784d09a55b24de5b24

  • SSDEEP

    1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwUUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5dd

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:839

Targets

    • Target

      x-3.2-.opticus.elf

    • Size

      84KB

    • MD5

      7273c44b1fa4c67d578b20201daf3a08

    • SHA1

      6b67d21c5e6d1dada3bb1a6fb144af78a946a16c

    • SHA256

      e9ab4c5775283235c852180f5f485057b92dc3fe9cb73ee56cadc081d0bc4f5a

    • SHA512

      3b6daf2f7dc74ddc1dec29198328006ea623fda271fa7e0da8239cb2c1820b24a94c8824ab501e051b70bfc3971b3e630858af328a38b7784d09a55b24de5b24

    • SSDEEP

      1536:sQmab6bXPm8VjWWHT0im5t3ItTShKW6GLdUF5MI5AtpgwUUOGHfV+mLI2VOYjXUd:Oab6bXPm8VjWWHT0B5t4tcnBUF5MI5dd

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks