General
-
Target
1fab8331e54e92ba7ab86907ddad38e0
-
Size
89KB
-
Sample
231219-2ml86abefm
-
MD5
1fab8331e54e92ba7ab86907ddad38e0
-
SHA1
cc3c148d477cd3a525684644f430d3676aa3f478
-
SHA256
ad0e0fdd48ceca9fcae4fe7caa8ccec537745fd3b2eb63e8194b9e9f697bf902
-
SHA512
2bddfb0a2edd50df48403f8ce598744e14e267c06422b06c2b9ac0b4a3940d993efffbfecce1132a01d0c946014858d3822ab2d25fadc1885517b395aa296fbf
-
SSDEEP
1536:qw3WNlMnmqUHt8OBXafXPkUOHXtp9MX5FoM6Xwv+tMatK0tc4POGEg0qc:n39VUNlByXPknHdpusM6gv+tx3tc4WG4
Behavioral task
behavioral1
Sample
1fab8331e54e92ba7ab86907ddad38e0
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
80.211.139.209:123
Targets
-
-
Target
1fab8331e54e92ba7ab86907ddad38e0
-
Size
89KB
-
MD5
1fab8331e54e92ba7ab86907ddad38e0
-
SHA1
cc3c148d477cd3a525684644f430d3676aa3f478
-
SHA256
ad0e0fdd48ceca9fcae4fe7caa8ccec537745fd3b2eb63e8194b9e9f697bf902
-
SHA512
2bddfb0a2edd50df48403f8ce598744e14e267c06422b06c2b9ac0b4a3940d993efffbfecce1132a01d0c946014858d3822ab2d25fadc1885517b395aa296fbf
-
SSDEEP
1536:qw3WNlMnmqUHt8OBXafXPkUOHXtp9MX5FoM6Xwv+tMatK0tc4POGEg0qc:n39VUNlByXPknHdpusM6gv+tx3tc4WG4
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-