General

  • Target
    x-8.6-.exodus
  • Size 140KB
  • Sample260825-plwpzsytf1
  • SHA256 626efd921df91f96474f7627ef3ddcd49d0c1f381758b81cc0da189acd2fd13a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • gafgyt

C2
  • 94.154.43.29:4444

Targets

    • Target
      x-8.6-.exodus
    • Size 140KB
    • SHA256 626efd921df91f96474f7627ef3ddcd49d0c1f381758b81cc0da189acd2fd13a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks