General

  • Target

    m-p.s-l.ISIS.elf

  • Size

    131KB

  • Sample

    250410-kkbwzawyav

  • MD5

    248787466566be9bed33b7dafae9a6c5

  • SHA1

    a472f3c3014318d82ba22338f42bcfdf14377091

  • SHA256

    deba9d554691fac161260399758e6c04ac8e9be64d8adbc0d1d5f87d11a9411c

  • SHA512

    3e3a0f8152a1a55588ca03ac010bd626f5e7868ed1102667616f3577933d49df7c281ecec47d1e87bb61881c378c73d87b0dbf5b0cf6309eb0268307a2d79657

  • SSDEEP

    1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYq0vd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF13vdlPUmkASFxBKvXZX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.222:839

Targets

    • Target

      m-p.s-l.ISIS.elf

    • Size

      131KB

    • MD5

      248787466566be9bed33b7dafae9a6c5

    • SHA1

      a472f3c3014318d82ba22338f42bcfdf14377091

    • SHA256

      deba9d554691fac161260399758e6c04ac8e9be64d8adbc0d1d5f87d11a9411c

    • SHA512

      3e3a0f8152a1a55588ca03ac010bd626f5e7868ed1102667616f3577933d49df7c281ecec47d1e87bb61881c378c73d87b0dbf5b0cf6309eb0268307a2d79657

    • SSDEEP

      1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYq0vd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF13vdlPUmkASFxBKvXZX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks