General
-
Target
19f2a414a29edd04426dcecb7649e719
-
Size
152KB
-
Sample
231219-2kb1eadgh7
-
MD5
19f2a414a29edd04426dcecb7649e719
-
SHA1
cf0cd7fd5ae3251862b1c2a96cbec1de768a7b38
-
SHA256
4a0051d0d1cce0fc7e8e8bfcfe78ba5d21f95994d229a2821c9ea7a59a2185bd
-
SHA512
a36a9d41c99c9d85dd6e0125e7684c125c211573aea8ae2fac33c3e5bf2bc1d42934f3d858cd94faa2bd140bc230a7326285ab1687df88e26806c5997b7cca6f
-
SSDEEP
3072:GMVlpwDaQ+YnsBLe8p6e9sJDEPEGuPgb9zBzdaYlx55hadLQfEQCfcxtKyYYyPHf:Iy92Qx55hadOEpfK8Q+kSQ2wvBA6+x
Behavioral task
behavioral1
Sample
19f2a414a29edd04426dcecb7649e719
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
51.91.202.137:8811
Targets
-
-
Target
19f2a414a29edd04426dcecb7649e719
-
Size
152KB
-
MD5
19f2a414a29edd04426dcecb7649e719
-
SHA1
cf0cd7fd5ae3251862b1c2a96cbec1de768a7b38
-
SHA256
4a0051d0d1cce0fc7e8e8bfcfe78ba5d21f95994d229a2821c9ea7a59a2185bd
-
SHA512
a36a9d41c99c9d85dd6e0125e7684c125c211573aea8ae2fac33c3e5bf2bc1d42934f3d858cd94faa2bd140bc230a7326285ab1687df88e26806c5997b7cca6f
-
SSDEEP
3072:GMVlpwDaQ+YnsBLe8p6e9sJDEPEGuPgb9zBzdaYlx55hadLQfEQCfcxtKyYYyPHf:Iy92Qx55hadOEpfK8Q+kSQ2wvBA6+x
Score9/10-
Contacts a large (175155) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-