General
-
Target
e1762eb8cb535400397dd876bdd7d02a.elf
-
Size
110KB
-
Sample
230408-3nvscshg3s
-
MD5
e1762eb8cb535400397dd876bdd7d02a
-
SHA1
184bcce7b93289cc2ada0cbef296ea15d974fffe
-
SHA256
795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f
-
SHA512
29ee341a34ecb7a57ca4e81e3333e4d5844cd7076680037afbf651d0ba03abaf2f1c3e413081739d64428eb183c60fc1cbb94ef718470cd31fab7a562a22b4f9
-
SSDEEP
1536:V7j+1TuBq+bkYQg2rKlJWl/SgEThaAClfGemoJnimWt0zFufCy/02vI:okrwSgE0tlfUoVimWOzFufJ02vI
Behavioral task
behavioral1
Sample
e1762eb8cb535400397dd876bdd7d02a.elf
Resource
debian9-mipsbe-en-20211208
Malware Config
Extracted
gafgyt
104.193.255.117:1234
Targets
-
-
Target
e1762eb8cb535400397dd876bdd7d02a.elf
-
Size
110KB
-
MD5
e1762eb8cb535400397dd876bdd7d02a
-
SHA1
184bcce7b93289cc2ada0cbef296ea15d974fffe
-
SHA256
795628ee91fce16c178849675ce3bf071925976fb08e0432265f9c93901b064f
-
SHA512
29ee341a34ecb7a57ca4e81e3333e4d5844cd7076680037afbf651d0ba03abaf2f1c3e413081739d64428eb183c60fc1cbb94ef718470cd31fab7a562a22b4f9
-
SSDEEP
1536:V7j+1TuBq+bkYQg2rKlJWl/SgEThaAClfGemoJnimWt0zFufCy/02vI:okrwSgE0tlfUoVimWOzFufJ02vI
Score7/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-