General
-
Target
b3fefe0638fe6ec9379250b7828c13c6.bin
-
Size
42KB
-
Sample
230404-cbqprseb3z
-
MD5
24f035c635b13ac7e5ac9a7594e0a290
-
SHA1
b95dfa5174f297c5974a2b9aa73c0d1db8129d91
-
SHA256
5717646f045971b2e06fca6859d0d2ef618d2c670a60ca6dcec3cab81707c0b4
-
SHA512
8712c90958cfeec3a03e144a7d5e9aec7551622a2cdcb3f04ccd25b1b7dc57eea38ad303beb9d0838ddc59a36b201dbb800467ae88cb7a2f82d989a9246ae3f4
-
SSDEEP
768:CzHb8aHP6hvdJdHAufp5k2ATr9ejGF6I4oVg1WaQ9HlzfNhvZv13:oa1dHhfMpj4I4LWXN7Zl
Behavioral task
behavioral1
Sample
8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf
Resource
debian9-mipsbe-20221111-en
Malware Config
Extracted
gafgyt
43.153.37.45:707
Targets
-
-
Target
8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf
-
Size
111KB
-
MD5
b3fefe0638fe6ec9379250b7828c13c6
-
SHA1
8acdd6917b5f3d742de9e30f083a585bfcb92450
-
SHA256
8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc
-
SHA512
c9af95d68bb33909424c7ca8d2b0fd0d5c5dc1fa36cbc794bd27a913855fb22195ec0c5a3889d2dd56c6a1ed16ce0f33cb7320fdc564fc104a226dcba5e818ad
-
SSDEEP
3072:7ExVvKY9cxN5hZXynGuExmkizF9GhsRiAe:o7SRN5hZXySxmkizF9GhsRiAe
Score7/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-