General
-
Target
146e9fcb6c9643a440a817edb0e15932
-
Size
203KB
-
Sample
231219-2g9r9schd4
-
MD5
146e9fcb6c9643a440a817edb0e15932
-
SHA1
cf77c3d267e1aec0e91124c82a6769f1b54ded65
-
SHA256
2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412
-
SHA512
ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4
-
SSDEEP
3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp
Behavioral task
behavioral1
Sample
146e9fcb6c9643a440a817edb0e15932
Resource
debian9-mipsbe-20231215-en
Malware Config
Extracted
gafgyt
185.62.190.159:1336
Targets
-
-
Target
146e9fcb6c9643a440a817edb0e15932
-
Size
203KB
-
MD5
146e9fcb6c9643a440a817edb0e15932
-
SHA1
cf77c3d267e1aec0e91124c82a6769f1b54ded65
-
SHA256
2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412
-
SHA512
ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4
-
SSDEEP
3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-