Overview

overview

10

Static

static

10

9cd54d4678...4d.elf

debian-9-mipsel

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9cd54d46782149cf01f8f5a224a3804d.elf

  • Size

    183KB

  • Sample

    240705-hzym6sxalf

  • MD5

    9cd54d46782149cf01f8f5a224a3804d

  • SHA1

    b8e5e56bbf9aac08e573e37892d166cafc4bd5ab

  • SHA256

    e1dd59a6f7ee428ba4a8d40599ac66fd78b91e9b4317c86ac12cea203e737027

  • SHA512

    40a57e50e993c8b18970a99129c90e4f39e643bc8e92f6526062664a614af701b8535232030fd717f7cdd0903045e1fb7072ef0c36c1e132cd6088cd0001ef16

  • SSDEEP

    3072:COF7bGC6Cv9RDV5hq01ZQhmv8uqx1BVnKoe:CMKWVFV5hqBhmv8uqx1BVnKoe

Score
10/10
gafgyt

Malware Config

Extracted

Family

gafgyt

C2

93.123.85.106:4444

Targets

    • Target

      9cd54d46782149cf01f8f5a224a3804d.elf

    • Size

      183KB

    • MD5

      9cd54d46782149cf01f8f5a224a3804d

    • SHA1

      b8e5e56bbf9aac08e573e37892d166cafc4bd5ab

    • SHA256

      e1dd59a6f7ee428ba4a8d40599ac66fd78b91e9b4317c86ac12cea203e737027

    • SHA512

      40a57e50e993c8b18970a99129c90e4f39e643bc8e92f6526062664a614af701b8535232030fd717f7cdd0903045e1fb7072ef0c36c1e132cd6088cd0001ef16

    • SSDEEP

      3072:COF7bGC6Cv9RDV5hq01ZQhmv8uqx1BVnKoe:CMKWVFV5hqBhmv8uqx1BVnKoe

    Score
    6/10

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks