Overview

overview

10

Static

static

10

p-p.c-.ISIS.elf

debian-9-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    p-p.c-.ISIS.elf

  • Size

    110KB

  • Sample

    250410-bg88maxvfv

  • MD5

    e8134cf1cb88c04d61b04d943124779b

  • SHA1

    99996b8be289d5506f1eded8d97f98381be8a540

  • SHA256

    24625dd7724646688061d9cc4af9f6706ca33de589a89897d7cf81dfc5ced808

  • SHA512

    16bbf847ea986dc3ee959d32e80bcb4267881563db98ed40ca3fe1cb84cc1a0714f62ea685c1410049321b53c876d3602bb27976029fc393cba86f736cccf6f4

  • SSDEEP

    3072:9lX2jKRi0ZDvCTpOv7DSubUmGVrQAXiUXouX:6j6ZUpOv7DImGVrQAXiUXouX

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.172:839

Targets

    • Target

      p-p.c-.ISIS.elf

    • Size

      110KB

    • MD5

      e8134cf1cb88c04d61b04d943124779b

    • SHA1

      99996b8be289d5506f1eded8d97f98381be8a540

    • SHA256

      24625dd7724646688061d9cc4af9f6706ca33de589a89897d7cf81dfc5ced808

    • SHA512

      16bbf847ea986dc3ee959d32e80bcb4267881563db98ed40ca3fe1cb84cc1a0714f62ea685c1410049321b53c876d3602bb27976029fc393cba86f736cccf6f4

    • SSDEEP

      3072:9lX2jKRi0ZDvCTpOv7DSubUmGVrQAXiUXouX:6j6ZUpOv7DImGVrQAXiUXouX

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks