General
-
Target
178d700c1bb4c56faa9383edc7829036
-
Size
159KB
-
Sample
231219-2jed5sddd8
-
MD5
178d700c1bb4c56faa9383edc7829036
-
SHA1
c5c9cd7fcdeb35f0318f84f4dce63dfce4af2191
-
SHA256
fa776d2b786bf5f9e451b63f29aa894240f24bea3afc8facc077069b5a409ea7
-
SHA512
93e454685dea38a2203849a046257f8f2c24a930049811489c7468beb033535a463cc47ac0065a0a3ab404296a855387f805734cb3e72c074da21338abcabb87
-
SSDEEP
3072:1h2njVA8d6nC9RqjMvoJx57htRxCdPvE9MhOYmYLPOLVPIOhoJDHX:uA8deWm57XyPv5OTYLPOLVPIOhoJDHX
Behavioral task
behavioral1
Sample
178d700c1bb4c56faa9383edc7829036
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
103.214.111.121:5888
Targets
-
-
Target
178d700c1bb4c56faa9383edc7829036
-
Size
159KB
-
MD5
178d700c1bb4c56faa9383edc7829036
-
SHA1
c5c9cd7fcdeb35f0318f84f4dce63dfce4af2191
-
SHA256
fa776d2b786bf5f9e451b63f29aa894240f24bea3afc8facc077069b5a409ea7
-
SHA512
93e454685dea38a2203849a046257f8f2c24a930049811489c7468beb033535a463cc47ac0065a0a3ab404296a855387f805734cb3e72c074da21338abcabb87
-
SSDEEP
3072:1h2njVA8d6nC9RqjMvoJx57htRxCdPvE9MhOYmYLPOLVPIOhoJDHX:uA8deWm57XyPv5OTYLPOLVPIOhoJDHX
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-