General

  • Target

    a-r.m-5.opticus.elf

  • Size

    102KB

  • Sample

    250309-je8s3synz9

  • MD5

    13d5afe66fd345dbf95d6b813d533225

  • SHA1

    fc9ac873e974b2c8b5032c0761b950e90c6c1e4f

  • SHA256

    63b79c959ba6eea45e22ce93ceafc0d8dd9c273321ac165adefe47f075a9f5aa

  • SHA512

    d42c1a05ea4fdd7649ea52ee6bc98d72e913cebb9cd38f5d150bbf3469fa42be04e6ab6e570d25d31c2cfd73289d5fa80658c845ca37eb31dc3d5bfa7bf84610

  • SSDEEP

    3072:Plf1jKRi/VYf84Yfk7XTRUmpEqQ45vVXY0X:vjdVC7Yfk7qmpEqQ45vVXY0X

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

196.251.80.231:839

Targets

    • Target

      a-r.m-5.opticus.elf

    • Size

      102KB

    • MD5

      13d5afe66fd345dbf95d6b813d533225

    • SHA1

      fc9ac873e974b2c8b5032c0761b950e90c6c1e4f

    • SHA256

      63b79c959ba6eea45e22ce93ceafc0d8dd9c273321ac165adefe47f075a9f5aa

    • SHA512

      d42c1a05ea4fdd7649ea52ee6bc98d72e913cebb9cd38f5d150bbf3469fa42be04e6ab6e570d25d31c2cfd73289d5fa80658c845ca37eb31dc3d5bfa7bf84610

    • SSDEEP

      3072:Plf1jKRi/VYf84Yfk7XTRUmpEqQ45vVXY0X:vjdVC7Yfk7qmpEqQ45vVXY0X

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks