General
-
Target
365d7d72140a2cfa26ae36c6557fd387
-
Size
147KB
-
Sample
231219-2w4jssafe8
-
MD5
365d7d72140a2cfa26ae36c6557fd387
-
SHA1
7d165f2f8d007d5e8138f61532787201d94a24bc
-
SHA256
498df90bc204302de81151a98fec1e6be789f4f786db4e7f06be58de4815b446
-
SHA512
b781956969992b1ad1254c5b7c6e63cc6c30af6575dfc6727bc4355fcd375c4348d235c1f059f6b66c7326c45f8f0d85056140b09bc4cc22a973897cd017bc6b
-
SSDEEP
3072:8nXWVJsz8JoU4RaG36qkS7pa8mV7d4hl7mLwfCDQSAW:8XWVJs4Jl4RaJZS7pa3V787mLwfCESAW
Behavioral task
behavioral1
Sample
365d7d72140a2cfa26ae36c6557fd387
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
142.11.219.202:60000
Targets
-
-
Target
365d7d72140a2cfa26ae36c6557fd387
-
Size
147KB
-
MD5
365d7d72140a2cfa26ae36c6557fd387
-
SHA1
7d165f2f8d007d5e8138f61532787201d94a24bc
-
SHA256
498df90bc204302de81151a98fec1e6be789f4f786db4e7f06be58de4815b446
-
SHA512
b781956969992b1ad1254c5b7c6e63cc6c30af6575dfc6727bc4355fcd375c4348d235c1f059f6b66c7326c45f8f0d85056140b09bc4cc22a973897cd017bc6b
-
SSDEEP
3072:8nXWVJsz8JoU4RaG36qkS7pa8mV7d4hl7mLwfCDQSAW:8XWVJs4Jl4RaJZS7pa3V787mLwfCESAW
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-