General
-
Target
192b99d88910fe3991ffe4a2857d4dbd
-
Size
194KB
-
Sample
231219-2j4n2aaeck
-
MD5
192b99d88910fe3991ffe4a2857d4dbd
-
SHA1
8136467aaf4b70f198bbdf74d4fcb03e00868881
-
SHA256
43ec832e0018337ef9c862b383137aa8acab69241cf8ffdff2a22451d691e4f9
-
SHA512
710df5bddae0eb3b6c128e510e3a2411d48772975bb9f8b4c270392588a373fec42df44ab262e90f8310d9bccfa0bcad725f2a67dca2a63497366dd96c7061ba
-
SSDEEP
3072:aBkh1ZW1kCMNAMRrcmnrdt6tIYLzwMNkb9Waodxdre92AzHOnVkNSKqxflk1fpKG:aBkKzkaUOCKwyD8eWtqHmyN4Jgz2Yk
Behavioral task
behavioral1
Sample
192b99d88910fe3991ffe4a2857d4dbd
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
167.88.124.204:132
Targets
-
-
Target
192b99d88910fe3991ffe4a2857d4dbd
-
Size
194KB
-
MD5
192b99d88910fe3991ffe4a2857d4dbd
-
SHA1
8136467aaf4b70f198bbdf74d4fcb03e00868881
-
SHA256
43ec832e0018337ef9c862b383137aa8acab69241cf8ffdff2a22451d691e4f9
-
SHA512
710df5bddae0eb3b6c128e510e3a2411d48772975bb9f8b4c270392588a373fec42df44ab262e90f8310d9bccfa0bcad725f2a67dca2a63497366dd96c7061ba
-
SSDEEP
3072:aBkh1ZW1kCMNAMRrcmnrdt6tIYLzwMNkb9Waodxdre92AzHOnVkNSKqxflk1fpKG:aBkKzkaUOCKwyD8eWtqHmyN4Jgz2Yk
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-