General

  • Target

    m-6.8-k.ISIS.elf

  • Size

    161KB

  • Sample

    250410-b2z6fsxzgw

  • MD5

    4c34dc74ba9a5484e17e0f6e18162ff7

  • SHA1

    ee17c9d64ecadb1ca6c9b4d3e0b49add5ab32a7f

  • SHA256

    3dc765bd2cf39ce4462b6d753ac9ff57e9fac40d2a931b52184184a0186f867c

  • SHA512

    87ffc66e8dffcddfe3fe2be1c4a22a343f858d970bf5bcbff44a2e6071c3f495dc826941636da0cde702ebe51c5602630ca85490d6f85d059250db749c64a9bf

  • SSDEEP

    3072:AdkbJBagqhj7yLWcugMcrSQLnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrhLnpzM/95MCmpwfFau

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.172:839

Targets

    • Target

      m-6.8-k.ISIS.elf

    • Size

      161KB

    • MD5

      4c34dc74ba9a5484e17e0f6e18162ff7

    • SHA1

      ee17c9d64ecadb1ca6c9b4d3e0b49add5ab32a7f

    • SHA256

      3dc765bd2cf39ce4462b6d753ac9ff57e9fac40d2a931b52184184a0186f867c

    • SHA512

      87ffc66e8dffcddfe3fe2be1c4a22a343f858d970bf5bcbff44a2e6071c3f495dc826941636da0cde702ebe51c5602630ca85490d6f85d059250db749c64a9bf

    • SSDEEP

      3072:AdkbJBagqhj7yLWcugMcrSQLnpQEM/9q4MCmpwfFRQfVE:MkNBagqhjWLycrhLnpzM/95MCmpwfFau

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks