General
-
Target
882586815206d1a4467d2f8ef121ba60
-
Size
116KB
-
Sample
231220-f98vsahbb3
-
MD5
882586815206d1a4467d2f8ef121ba60
-
SHA1
f348d5c21e1783b267bd37ffb94b71dd6f439017
-
SHA256
2da7ed47c0e83b89a6e2845c6831cd4ab7d566529aaa315f196694e3adc5d40b
-
SHA512
e03d945411278462baffcf0b91c13678dcc3412603d36f0254582fe22652bf43a99283997360e138a29a9b00f6936c089da431c1a2e9cf52825bd885a6739936
-
SSDEEP
3072:zzPwUKUBV9+4fVTNv5j8setJ8au49QuTs/LKBP7otXBtcZkG7gyqc:IBo1N551etJ8au4lYyotXBtcZn7gyqc
Behavioral task
behavioral1
Sample
882586815206d1a4467d2f8ef121ba60
Resource
ubuntu1804-amd64-20231215-en
Malware Config
Extracted
gafgyt
138.68.238.104:1749
Targets
-
-
Target
882586815206d1a4467d2f8ef121ba60
-
Size
116KB
-
MD5
882586815206d1a4467d2f8ef121ba60
-
SHA1
f348d5c21e1783b267bd37ffb94b71dd6f439017
-
SHA256
2da7ed47c0e83b89a6e2845c6831cd4ab7d566529aaa315f196694e3adc5d40b
-
SHA512
e03d945411278462baffcf0b91c13678dcc3412603d36f0254582fe22652bf43a99283997360e138a29a9b00f6936c089da431c1a2e9cf52825bd885a6739936
-
SSDEEP
3072:zzPwUKUBV9+4fVTNv5j8setJ8au49QuTs/LKBP7otXBtcZkG7gyqc:IBo1N551etJ8au4lYyotXBtcZn7gyqc
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-