Overview

overview

10

Static

static

10

Okami.arm6.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Okami.arm6.elf

  • Size

    117KB

  • Sample

    240705-gtq6gawemg

  • MD5

    33f886deb0902197094f0e9b528f3489

  • SHA1

    e905857e080d6a94d67264346712bc17f50e284b

  • SHA256

    c3e7229dc68c4ea08690abd2cb5cdee7ef91e8148aab288ebc9b53a79ee10897

  • SHA512

    99238c580244e6833ddc41adabf883ecd1d624a1ccb5c57d0ed2d147fd712c872834b9847c61bcc7e16fe9b14ae517c2a95772d816d0170f1ffcca703cbccdb6

  • SSDEEP

    3072:j6XaCc1WaCl9O8E/uPT845hOsx2qbiELbWrF4mygQCYsmXKhi:j6XaCc1WcuPTP5hpx2YkmmygQCYsYKhi

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.246:6963

Targets

    • Target

      Okami.arm6.elf

    • Size

      117KB

    • MD5

      33f886deb0902197094f0e9b528f3489

    • SHA1

      e905857e080d6a94d67264346712bc17f50e284b

    • SHA256

      c3e7229dc68c4ea08690abd2cb5cdee7ef91e8148aab288ebc9b53a79ee10897

    • SHA512

      99238c580244e6833ddc41adabf883ecd1d624a1ccb5c57d0ed2d147fd712c872834b9847c61bcc7e16fe9b14ae517c2a95772d816d0170f1ffcca703cbccdb6

    • SSDEEP

      3072:j6XaCc1WaCl9O8E/uPT845hOsx2qbiELbWrF4mygQCYsmXKhi:j6XaCc1WcuPTP5hpx2YkmmygQCYsYKhi

    Score
    7/10

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks