Overview

overview

10

Static

static

10

53102a2da9...85.elf

ubuntu-22.04-amd64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53102a2da96fdfdc263fc046e0b98585.elf

  • Size

    140KB

  • Sample

    240705-h4cw9svalk

  • MD5

    53102a2da96fdfdc263fc046e0b98585

  • SHA1

    d0a527cc01265ae7822011fc63ee27ea95ae757a

  • SHA256

    82a4f66b771443b70cb8679845e401a5555048d90bab675c20b1bb9a325387ab

  • SHA512

    0b00b62dd2356d91afed0defa9ccfab779b6f1bf8f37d546c4fce8d9fd1018861727e2e53ec4990c0e9e08ee18a34bdfc37b985d41ebc0f2c898ab07cae9b938

  • SSDEEP

    3072:6yUyaJ3LUQEWuZI3zKZPhJuphaBZtwktUm+QVOXFNqOPPe:M3OI3mUphajtwxm+QVOXFNqOPPe

Score
10/10
gafgytlinux

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.106:4444

Targets

    • Target

      53102a2da96fdfdc263fc046e0b98585.elf

    • Size

      140KB

    • MD5

      53102a2da96fdfdc263fc046e0b98585

    • SHA1

      d0a527cc01265ae7822011fc63ee27ea95ae757a

    • SHA256

      82a4f66b771443b70cb8679845e401a5555048d90bab675c20b1bb9a325387ab

    • SHA512

      0b00b62dd2356d91afed0defa9ccfab779b6f1bf8f37d546c4fce8d9fd1018861727e2e53ec4990c0e9e08ee18a34bdfc37b985d41ebc0f2c898ab07cae9b938

    • SSDEEP

      3072:6yUyaJ3LUQEWuZI3zKZPhJuphaBZtwktUm+QVOXFNqOPPe:M3OI3mUphajtwxm+QVOXFNqOPPe

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks