Overview

overview

10

Static

static

10

34fe0ac589...21.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34fe0ac5890fc10f5b9d892591dd2e21.elf

  • Size

    120KB

  • Sample

    240705-h4c72axarf

  • MD5

    34fe0ac5890fc10f5b9d892591dd2e21

  • SHA1

    26998e7747b6654d3bef21b10b05b454c047434b

  • SHA256

    cffba3b90411f46bb148728938d6f796ba2878c7839ba4c81d056cc5f0726e00

  • SHA512

    0de9c3079ba76df4a8e29d24414da4d4fe8223360127a34a3fc517ddf9574f4602200d7dd8ff11f302b806a08d450ff173542a309091d9028446a90e1e8bb12c

  • SSDEEP

    3072:Sj1A3nHU8U3UrUlUPUJUxeLHxdiMBOnXr5hokymJC0OzQaGyPZk:SK3HtMUccrxeLRR4Xr5hoZmJC0OzQaGN

Score
10/10
gafgytlinuxrootkit

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.106:4444

Targets

    • Target

      34fe0ac5890fc10f5b9d892591dd2e21.elf

    • Size

      120KB

    • MD5

      34fe0ac5890fc10f5b9d892591dd2e21

    • SHA1

      26998e7747b6654d3bef21b10b05b454c047434b

    • SHA256

      cffba3b90411f46bb148728938d6f796ba2878c7839ba4c81d056cc5f0726e00

    • SHA512

      0de9c3079ba76df4a8e29d24414da4d4fe8223360127a34a3fc517ddf9574f4602200d7dd8ff11f302b806a08d450ff173542a309091d9028446a90e1e8bb12c

    • SSDEEP

      3072:Sj1A3nHU8U3UrUlUPUJUxeLHxdiMBOnXr5hokymJC0OzQaGyPZk:SK3HtMUccrxeLRR4Xr5hoZmJC0OzQaGN

    Score
    7/10
    rootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit
    behavioral1

MITRE ATT&CK Matrix

Tasks