General

  • Target

    m-6.8-k.opticus.elf

  • Size

    161KB

  • Sample

    250309-jc2a8aywf1

  • MD5

    1a0f1649c5a72726c15c936d0c96161c

  • SHA1

    682f18d242c6b04e457f632987556184a048963e

  • SHA256

    bb6caf3168dbf71d44139c123e24d4612fbeaab958d70a5f8434a4a38183f8ab

  • SHA512

    750df932d445399e103d34b88d06477d6a90a3729fd019a761cb0822e1dbfd4467a951c584fda588148e3fb1f314a5ab546918157ef7c349b8c344bf5ceab298

  • SSDEEP

    3072:AdkbJBagqhj7yLWcugMcrS5LnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrkLnpzM/95MCmpwfFau

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:839

Targets

    • Target

      m-6.8-k.opticus.elf

    • Size

      161KB

    • MD5

      1a0f1649c5a72726c15c936d0c96161c

    • SHA1

      682f18d242c6b04e457f632987556184a048963e

    • SHA256

      bb6caf3168dbf71d44139c123e24d4612fbeaab958d70a5f8434a4a38183f8ab

    • SHA512

      750df932d445399e103d34b88d06477d6a90a3729fd019a761cb0822e1dbfd4467a951c584fda588148e3fb1f314a5ab546918157ef7c349b8c344bf5ceab298

    • SSDEEP

      3072:AdkbJBagqhj7yLWcugMcrS5LnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrkLnpzM/95MCmpwfFau

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks