General
-
Target
8249848bc19a71ee3c782ad84111f520
-
Size
191KB
-
Sample
231220-ekcwdaebf8
-
MD5
8249848bc19a71ee3c782ad84111f520
-
SHA1
ede4bf714b06770bd4b58a66ad0c532ee83b363f
-
SHA256
8c18606de3e65f51fabe319cdac24ce325c8dd46dca1e5c1f74d9761a87e92c4
-
SHA512
6fe413b825332270889330d6820187cd9ba8d194f238f2337f3c8871187d89c45961aa1ea1bc158e8439107c8f2550c92befa1cf7a8610f928e707e90d7f9324
-
SSDEEP
3072:NgO4HGXq11zXqwL5ScNZf1t3aLUUGPNxibtNf8eNgJs12lhvc5PsEsEUxxQLzJlL:NRt7+7I19pEblQoZCQ9gOS1SeX
Behavioral task
behavioral1
Sample
8249848bc19a71ee3c782ad84111f520
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
5.83.163.78:23
Targets
-
-
Target
8249848bc19a71ee3c782ad84111f520
-
Size
191KB
-
MD5
8249848bc19a71ee3c782ad84111f520
-
SHA1
ede4bf714b06770bd4b58a66ad0c532ee83b363f
-
SHA256
8c18606de3e65f51fabe319cdac24ce325c8dd46dca1e5c1f74d9761a87e92c4
-
SHA512
6fe413b825332270889330d6820187cd9ba8d194f238f2337f3c8871187d89c45961aa1ea1bc158e8439107c8f2550c92befa1cf7a8610f928e707e90d7f9324
-
SSDEEP
3072:NgO4HGXq11zXqwL5ScNZf1t3aLUUGPNxibtNf8eNgJs12lhvc5PsEsEUxxQLzJlL:NRt7+7I19pEblQoZCQ9gOS1SeX
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-