General

  • Target

    x-8.6-.ISIS.elf

  • Size

    97KB

  • Sample

    250410-kkggfswqw7

  • MD5

    41c1b095c00c3f756fd009b1683f4f2d

  • SHA1

    22d88ad45f1b3f9559d8b2576c396b9314cb8763

  • SHA256

    c9aa871ebf966c38b24b140853a18c66b023de4b803cd214e166a92db11a7ec8

  • SHA512

    77a201f2854c2e1c293edea698f5c58e15bbd290c53a2a0ca54c3caeca5c4f76bc59e4f9ce3e66192cb984dcbf47edd038bfd311580582d124e915cd4a48b3c9

  • SSDEEP

    3072:2K5ejA4jB4h89HOPQzM9FqVyy9W9vmrYuOHy+ZNzX:sHjBzuPQQ8k9vmrYuOHy+ZNzX

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.222:839

Targets

    • Target

      x-8.6-.ISIS.elf

    • Size

      97KB

    • MD5

      41c1b095c00c3f756fd009b1683f4f2d

    • SHA1

      22d88ad45f1b3f9559d8b2576c396b9314cb8763

    • SHA256

      c9aa871ebf966c38b24b140853a18c66b023de4b803cd214e166a92db11a7ec8

    • SHA512

      77a201f2854c2e1c293edea698f5c58e15bbd290c53a2a0ca54c3caeca5c4f76bc59e4f9ce3e66192cb984dcbf47edd038bfd311580582d124e915cd4a48b3c9

    • SSDEEP

      3072:2K5ejA4jB4h89HOPQzM9FqVyy9W9vmrYuOHy+ZNzX:sHjBzuPQQ8k9vmrYuOHy+ZNzX

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks