General
-
Target
3c3aa3e17a304765072f84932c35fa69
-
Size
107KB
-
Sample
231219-2y9tlagdbq
-
MD5
3c3aa3e17a304765072f84932c35fa69
-
SHA1
d7d0f5b6f79ab44c2fd3b3e08a09d6dd81cdad08
-
SHA256
78c8c1085deec3fa9d6626bfeb2d736d4a2c0672268ca9aa586cfce599eda3b2
-
SHA512
ef0e94bb03af5948ad7d980dbfbb505e69d2584dd4b91158011ecc12b46d7e82760856190e905da83b5365ce851e90e628406bd1294479d4b89e6ee34ba4f1c5
-
SSDEEP
3072:g1gcMVq+tc6Po+s36fmvKRsVGphay7K+VHmm4ucPCSFS+66:FpDsqeClphayhVmm4ucPCSFS+66
Behavioral task
behavioral1
Sample
3c3aa3e17a304765072f84932c35fa69
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
35.247.247.151:666
Targets
-
-
Target
3c3aa3e17a304765072f84932c35fa69
-
Size
107KB
-
MD5
3c3aa3e17a304765072f84932c35fa69
-
SHA1
d7d0f5b6f79ab44c2fd3b3e08a09d6dd81cdad08
-
SHA256
78c8c1085deec3fa9d6626bfeb2d736d4a2c0672268ca9aa586cfce599eda3b2
-
SHA512
ef0e94bb03af5948ad7d980dbfbb505e69d2584dd4b91158011ecc12b46d7e82760856190e905da83b5365ce851e90e628406bd1294479d4b89e6ee34ba4f1c5
-
SSDEEP
3072:g1gcMVq+tc6Po+s36fmvKRsVGphay7K+VHmm4ucPCSFS+66:FpDsqeClphayhVmm4ucPCSFS+66
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-