Overview

overview

10

Static

static

10

658cfebc1b...a0.elf

debian-12-armhf

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0.elf

  • Size

    204KB

  • Sample

    240703-brvszszena

  • MD5

    d2edb52b694fde72534058e5bb89b290

  • SHA1

    b0f691645e4b76ff6d5f7e53bb837a0e1c2bd0ac

  • SHA256

    658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0

  • SHA512

    81663bd64b26bb2674d7e31e3066b40651372b3b87687fa7195f4127cef9bc4f0cc7455ae657a572259029591da418ff4a00e38584f38888b6cc0afebf9d2ef1

  • SSDEEP

    6144:FZzyacCwXJ4DbpW0vV5hbL6nWgV7Ocgym0wfB5RyAn:FZzyacCwXJ4gC5hbLi3gym0mB5RyAn

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

195.85.205.47:777

Targets

    • Target

      658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0.elf

    • Size

      204KB

    • MD5

      d2edb52b694fde72534058e5bb89b290

    • SHA1

      b0f691645e4b76ff6d5f7e53bb837a0e1c2bd0ac

    • SHA256

      658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0

    • SHA512

      81663bd64b26bb2674d7e31e3066b40651372b3b87687fa7195f4127cef9bc4f0cc7455ae657a572259029591da418ff4a00e38584f38888b6cc0afebf9d2ef1

    • SSDEEP

      6144:FZzyacCwXJ4DbpW0vV5hbL6nWgV7Ocgym0wfB5RyAn:FZzyacCwXJ4gC5hbLi3gym0mB5RyAn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks