Overview

overview

10

Static

static

10

671d7db9ea...39ca8f

debian-12-armhf

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    671d7db9ea9bc33168e51c97c52d3ff9e8f4c596dcbbd224ef4a1b6e3939ca8f
  • Size 156KB
  • Sample260907-ekt5nack5x
  • SHA256 671d7db9ea9bc33168e51c97c52d3ff9e8f4c596dcbbd224ef4a1b6e3939ca8f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
gafgytbotnetdiscovery

Malware Config

Extracted

Family

  • gafgyt

C2

  • 94.154.43.200:606

Targets

    • Target
      671d7db9ea9bc33168e51c97c52d3ff9e8f4c596dcbbd224ef4a1b6e3939ca8f
    • Size 156KB
    • SHA256 671d7db9ea9bc33168e51c97c52d3ff9e8f4c596dcbbd224ef4a1b6e3939ca8f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks