General
-
Target
74a50e984ef94014f58ad99e5c7e4336
-
Size
143KB
-
Sample
231220-arh9hsehh4
-
MD5
74a50e984ef94014f58ad99e5c7e4336
-
SHA1
196d433a5d7007b3687e396bc41a7fd6ed7d9834
-
SHA256
4b6a02ec3d3e9779d80b8468a9eaef6c51dfd754147dcb0c92b1deb423d0f309
-
SHA512
e698aaf56e7ef87981f5ecf08578948bf606b1a288943d9837f6aba8065aaf67f4ad258e13d02b574e8aa12b0bed5d2bca53b2ea2ba45d8748497819e0acd036
-
SSDEEP
3072:2t8wd9Jb+mWMZv+SsW0btDDX+e/n0o8e7XH90PcZsatph1:uZd3amAfNDX+e/n77XH90PcZsatph1
Behavioral task
behavioral1
Sample
74a50e984ef94014f58ad99e5c7e4336
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
107.182.225.125:23
Targets
-
-
Target
74a50e984ef94014f58ad99e5c7e4336
-
Size
143KB
-
MD5
74a50e984ef94014f58ad99e5c7e4336
-
SHA1
196d433a5d7007b3687e396bc41a7fd6ed7d9834
-
SHA256
4b6a02ec3d3e9779d80b8468a9eaef6c51dfd754147dcb0c92b1deb423d0f309
-
SHA512
e698aaf56e7ef87981f5ecf08578948bf606b1a288943d9837f6aba8065aaf67f4ad258e13d02b574e8aa12b0bed5d2bca53b2ea2ba45d8748497819e0acd036
-
SSDEEP
3072:2t8wd9Jb+mWMZv+SsW0btDDX+e/n0o8e7XH90PcZsatph1:uZd3amAfNDX+e/n77XH90PcZsatph1
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-