Overview

overview

10

Static

static

10

a28f65005e...54.elf

debian-12-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a28f65005e99510e6865e8e613d753f5703ffa063ed48507b68db67029f23e54.elf

  • Size

    209KB

  • Sample

    240703-cvasnawhrj

  • MD5

    f1ea984d4128169b4b15b0e204f9ce58

  • SHA1

    1dff8b605fe5d64cc19c14d8c9eca11661133523

  • SHA256

    a28f65005e99510e6865e8e613d753f5703ffa063ed48507b68db67029f23e54

  • SHA512

    b66a6aa02427e4d938bc8b53d118139d831129bf774c3252b40abcc641eaf0a7dee0072c24b0b0d670e07fb90a373dc025aaa8451a8e3a4fef64a9a122f5fe36

  • SSDEEP

    3072:T4mSFGv/kuidcX1qRdcB5hfH3TwpCMtmrpy6n9Nn:pn/ZmbRCB5hfXJMtmrpy6n9Nn

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

195.85.205.47:777

Targets

    • Target

      a28f65005e99510e6865e8e613d753f5703ffa063ed48507b68db67029f23e54.elf

    • Size

      209KB

    • MD5

      f1ea984d4128169b4b15b0e204f9ce58

    • SHA1

      1dff8b605fe5d64cc19c14d8c9eca11661133523

    • SHA256

      a28f65005e99510e6865e8e613d753f5703ffa063ed48507b68db67029f23e54

    • SHA512

      b66a6aa02427e4d938bc8b53d118139d831129bf774c3252b40abcc641eaf0a7dee0072c24b0b0d670e07fb90a373dc025aaa8451a8e3a4fef64a9a122f5fe36

    • SSDEEP

      3072:T4mSFGv/kuidcX1qRdcB5hfH3TwpCMtmrpy6n9Nn:pn/ZmbRCB5hfXJMtmrpy6n9Nn

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks