General
-
Target
05d61c9bbe5b4583df5b6667cfe592d3
-
Size
139KB
-
Sample
231219-2bh3csaea6
-
MD5
05d61c9bbe5b4583df5b6667cfe592d3
-
SHA1
5b1efa9bc07977a2a389f17ee8eebf62c3daafff
-
SHA256
74d7703f63149de82ff6f6f584f23ffe694242014a12c922f959097bf8da70cc
-
SHA512
aec0727152e9195c2abe0b5ddd096136f90ba294ac23db7445300c212263bea232477e954256f7cb5f3737edbb752ab1cb5f53c7fc75d4e3aa06a3575d3a3a26
-
SSDEEP
3072:/wQUAsPbw0U2dCsJfx/x9/IZ8erIfJCBGEDHziH90PcZsatph1:3st7RRjIZ8eaCwE/iH90PcZsatph1
Behavioral task
behavioral1
Sample
05d61c9bbe5b4583df5b6667cfe592d3
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
167.88.124.204:132
Targets
-
-
Target
05d61c9bbe5b4583df5b6667cfe592d3
-
Size
139KB
-
MD5
05d61c9bbe5b4583df5b6667cfe592d3
-
SHA1
5b1efa9bc07977a2a389f17ee8eebf62c3daafff
-
SHA256
74d7703f63149de82ff6f6f584f23ffe694242014a12c922f959097bf8da70cc
-
SHA512
aec0727152e9195c2abe0b5ddd096136f90ba294ac23db7445300c212263bea232477e954256f7cb5f3737edbb752ab1cb5f53c7fc75d4e3aa06a3575d3a3a26
-
SSDEEP
3072:/wQUAsPbw0U2dCsJfx/x9/IZ8erIfJCBGEDHziH90PcZsatph1:3st7RRjIZ8eaCwE/iH90PcZsatph1
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-