General

  • Target

    x-8.6-.ISIS.elf

  • Size

    97KB

  • Sample

    250410-abwjxawvh1

  • MD5

    e0ddd78b6cb5f2c0e8156f252a90410b

  • SHA1

    f2b06467adcda68c37d1a301020b1fa0958ec780

  • SHA256

    01c48a883b0b7520ae59f37a35d65d96a9bbeec4d473b90fb2ec2bf6b918af87

  • SHA512

    0cebedf86712c63d88256c9a1288c81253c4b9a04c74909952673d3dc19a2fb7775daf9433c5360465e4f98a7a0a19faa157d121b50ca1843914e3a1dd6d6ae0

  • SSDEEP

    3072:3KrejEPJN/89HOPQzM9FqVy7929vmrYuOHy+ZNzX:xEPJcuPQQJE9vmrYuOHy+ZNzX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.172:839

Targets

    • Target

      x-8.6-.ISIS.elf

    • Size

      97KB

    • MD5

      e0ddd78b6cb5f2c0e8156f252a90410b

    • SHA1

      f2b06467adcda68c37d1a301020b1fa0958ec780

    • SHA256

      01c48a883b0b7520ae59f37a35d65d96a9bbeec4d473b90fb2ec2bf6b918af87

    • SHA512

      0cebedf86712c63d88256c9a1288c81253c4b9a04c74909952673d3dc19a2fb7775daf9433c5360465e4f98a7a0a19faa157d121b50ca1843914e3a1dd6d6ae0

    • SSDEEP

      3072:3KrejEPJN/89HOPQzM9FqVy7929vmrYuOHy+ZNzX:xEPJcuPQQJE9vmrYuOHy+ZNzX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks