General

  • Target

    a-r.m-6.ISIS.elf

  • Size

    124KB

  • Sample

    250410-kxrsysxkt3

  • MD5

    8b089e1d3c3be2744ea9b833a2441d1e

  • SHA1

    71b25089b46de0477385725a832005ef44525857

  • SHA256

    c040c79ae778f6d24c0a3b0d46d3bdc5bf36ef599976843054080df72423426a

  • SHA512

    be3c744a72975a4f8663482e2043bf321d93481b764089127fdf1bbcb2c9a04d6517d2143b0b22f731ae05663ccb7d04bf529aecef059390cec0f6af53f0a661

  • SSDEEP

    3072:KdB2qwap6KVXPi4jv8x+sMDkmDhZmTQOIsXAqE:aRwap6Kt6+sMDHZmTQOICAqE

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

176.65.143.222:839

Targets

    • Target

      a-r.m-6.ISIS.elf

    • Size

      124KB

    • MD5

      8b089e1d3c3be2744ea9b833a2441d1e

    • SHA1

      71b25089b46de0477385725a832005ef44525857

    • SHA256

      c040c79ae778f6d24c0a3b0d46d3bdc5bf36ef599976843054080df72423426a

    • SHA512

      be3c744a72975a4f8663482e2043bf321d93481b764089127fdf1bbcb2c9a04d6517d2143b0b22f731ae05663ccb7d04bf529aecef059390cec0f6af53f0a661

    • SSDEEP

      3072:KdB2qwap6KVXPi4jv8x+sMDkmDhZmTQOIsXAqE:aRwap6Kt6+sMDHZmTQOICAqE

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks