General
-
Target
09abca2518207641dd2162c965006935
-
Size
134KB
-
Sample
231219-2cy5zafhhj
-
MD5
09abca2518207641dd2162c965006935
-
SHA1
9dbc142b4d0caecedafb60ef32c0688428429eec
-
SHA256
fb946f4cd0daa17138194b3ebb85ea8fabed06e8320df5979d719e1298a7fcd3
-
SHA512
61b554bc8e95c3a0ce23f3f1c844360588425e1fcccbc517d7c87fa4de736110e5ce876646c28102ec1aa851ea06a14b2b74c677b748da09af1ec92645801d2d
-
SSDEEP
3072:HuhoRk9Mkc8xuZnfknqI2YrapH5yHZlwZzofij5LPNBE4OUGVIPjfiUinLdxis89:OhMjE4GVIPjfiUinLdMs8GW
Behavioral task
behavioral1
Sample
09abca2518207641dd2162c965006935
Resource
debian9-mipsbe-20231215-en
Malware Config
Extracted
gafgyt
46.29.164.93:626
Targets
-
-
Target
09abca2518207641dd2162c965006935
-
Size
134KB
-
MD5
09abca2518207641dd2162c965006935
-
SHA1
9dbc142b4d0caecedafb60ef32c0688428429eec
-
SHA256
fb946f4cd0daa17138194b3ebb85ea8fabed06e8320df5979d719e1298a7fcd3
-
SHA512
61b554bc8e95c3a0ce23f3f1c844360588425e1fcccbc517d7c87fa4de736110e5ce876646c28102ec1aa851ea06a14b2b74c677b748da09af1ec92645801d2d
-
SSDEEP
3072:HuhoRk9Mkc8xuZnfknqI2YrapH5yHZlwZzofij5LPNBE4OUGVIPjfiUinLdxis89:OhMjE4GVIPjfiUinLdMs8GW
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-