General
-
Target
2c888ffe2b879068d6bec199d8711a12
-
Size
134KB
-
Sample
231219-2sbplshab8
-
MD5
2c888ffe2b879068d6bec199d8711a12
-
SHA1
3ad425682ef42606ca1c4faa20795b48906272f9
-
SHA256
b52027ca386f77667754bc6ca781327f9ea2dfde694a3bef1b48cacc8463631b
-
SHA512
2298a0f6c06ca2824e32bd0e64bc8a05414c7ae02a0357dd96d27e2ea8658d2b5a5d85452deeb0ac2f88cb11393628af5a6438c8adb55e859fe214240cea24d7
-
SSDEEP
3072:J1gyonCtpDE6U4rrd7et1m66AutJ8a+PQ4KQOjsq4FTjmReAomcBfG3SggW:/E6UW7OwSutJ8a+PQ46VdReAomcBO3Ss
Behavioral task
behavioral1
Sample
2c888ffe2b879068d6bec199d8711a12
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
185.58.225.28:23
Targets
-
-
Target
2c888ffe2b879068d6bec199d8711a12
-
Size
134KB
-
MD5
2c888ffe2b879068d6bec199d8711a12
-
SHA1
3ad425682ef42606ca1c4faa20795b48906272f9
-
SHA256
b52027ca386f77667754bc6ca781327f9ea2dfde694a3bef1b48cacc8463631b
-
SHA512
2298a0f6c06ca2824e32bd0e64bc8a05414c7ae02a0357dd96d27e2ea8658d2b5a5d85452deeb0ac2f88cb11393628af5a6438c8adb55e859fe214240cea24d7
-
SSDEEP
3072:J1gyonCtpDE6U4rrd7et1m66AutJ8a+PQ4KQOjsq4FTjmReAomcBfG3SggW:/E6UW7OwSutJ8a+PQ46VdReAomcBO3Ss
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-