Overview

overview

10

Static

static

10

m-p.s-l.ISIS.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    m-p.s-l.ISIS.elf

  • Size

    131KB

  • Sample

    250410-cky3haykt5

  • MD5

    4106f65fb6664f78141d7d52dee758b7

  • SHA1

    eb77c4b5beb7c723c88af84749506c39c6be276a

  • SHA256

    caeeb89d86c41917e89af2a3ba5ffac7a5c758041d47dfa22e8079f52438c7e5

  • SHA512

    0b8ae812c10e232fbbddcf4c53da9ee00caea322c29c951ea24d91dc01f5c88ad742c4a86947df29d483f8ac1a8dac1a45c02ac100b8ded9368911598b1247a8

  • SSDEEP

    1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqEvd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF17vdlPUmkASFxBKvXZX

Score
10/10
gafgytdiscovery

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.172:839

Targets

    • Target

      m-p.s-l.ISIS.elf

    • Size

      131KB

    • MD5

      4106f65fb6664f78141d7d52dee758b7

    • SHA1

      eb77c4b5beb7c723c88af84749506c39c6be276a

    • SHA256

      caeeb89d86c41917e89af2a3ba5ffac7a5c758041d47dfa22e8079f52438c7e5

    • SHA512

      0b8ae812c10e232fbbddcf4c53da9ee00caea322c29c951ea24d91dc01f5c88ad742c4a86947df29d483f8ac1a8dac1a45c02ac100b8ded9368911598b1247a8

    • SSDEEP

      1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqEvd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF17vdlPUmkASFxBKvXZX

    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks