General

  • Target

    x-8.6-.opticus.elf

  • Size

    97KB

  • Sample

    250309-jc2a8aynx2

  • MD5

    92a289d6fa890bcbc265d9aae8fca04c

  • SHA1

    e2f93c8c6af1920e3c482811be9a37ee3403c99f

  • SHA256

    8aee4d80ef0d4f29dbd6aa15b47c1ac3696c25db44cc8144963e78e51e7b4826

  • SHA512

    c2f7c23c0a6ba91f0f410a25bcd1f97deda795f10527ee4dd1788983323be6a2bcf2d88cbae77415dca546b050fefa14ef2cd5287a3e6d2a21b934c0562057ea

  • SSDEEP

    3072:2K5ejA4jB4h89HOPQzM9FqVyV9W9vmrYuOHy+ZNzX:sHjBzuPQQLk9vmrYuOHy+ZNzX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:839

Targets

    • Target

      x-8.6-.opticus.elf

    • Size

      97KB

    • MD5

      92a289d6fa890bcbc265d9aae8fca04c

    • SHA1

      e2f93c8c6af1920e3c482811be9a37ee3403c99f

    • SHA256

      8aee4d80ef0d4f29dbd6aa15b47c1ac3696c25db44cc8144963e78e51e7b4826

    • SHA512

      c2f7c23c0a6ba91f0f410a25bcd1f97deda795f10527ee4dd1788983323be6a2bcf2d88cbae77415dca546b050fefa14ef2cd5287a3e6d2a21b934c0562057ea

    • SSDEEP

      3072:2K5ejA4jB4h89HOPQzM9FqVyV9W9vmrYuOHy+ZNzX:sHjBzuPQQLk9vmrYuOHy+ZNzX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks