General
-
Target
6b62c0d842fa3bd105735ad1838c326c
-
Size
184KB
-
Sample
231219-3he5qabcd4
-
MD5
6b62c0d842fa3bd105735ad1838c326c
-
SHA1
9b1ccf77955d77785c45ba1e573b8b25012f9a23
-
SHA256
15178e916f7daab367af7083f4fc121c432a40e15b3d0787007d7bd6c49403df
-
SHA512
3e300d8c06ffcb118253e0b7e4324d912ac8b445b55b9b2eaf28ff00aa725c05c259192d9980ce0e93ccfdebbebbc5afe4dbd0f0095e1930295e9d6749b0283a
-
SSDEEP
3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlE:X6hvUB89hObA5QXoO5Dt0DR1M4X
Behavioral task
behavioral1
Sample
6b62c0d842fa3bd105735ad1838c326c
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
80.211.167.8:23
Targets
-
-
Target
6b62c0d842fa3bd105735ad1838c326c
-
Size
184KB
-
MD5
6b62c0d842fa3bd105735ad1838c326c
-
SHA1
9b1ccf77955d77785c45ba1e573b8b25012f9a23
-
SHA256
15178e916f7daab367af7083f4fc121c432a40e15b3d0787007d7bd6c49403df
-
SHA512
3e300d8c06ffcb118253e0b7e4324d912ac8b445b55b9b2eaf28ff00aa725c05c259192d9980ce0e93ccfdebbebbc5afe4dbd0f0095e1930295e9d6749b0283a
-
SSDEEP
3072:XWn4fGXq11zXqwL5SKNZf1t3aLUUGPNCibtNf8eNgJs12Ohvc5PsEsEUxxQLgJlE:X6hvUB89hObA5QXoO5Dt0DR1M4X
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-