General
-
Target
9fdc00dda6150fec55c7280303df75b5
-
Size
148KB
-
Sample
231220-l479yscbh5
-
MD5
9fdc00dda6150fec55c7280303df75b5
-
SHA1
1def6c469048a1d26fe6296b434fbc41999767ef
-
SHA256
f291e754f64343d42d96568872e9a9da76c3656693099f3da042fe5b02dc8584
-
SHA512
dd3bc9886980188a79b8ad1a828bde2a30a7a1be9e283f72a48349539e12d1c0be5f1359756fe9783e4fbf9def7171a12c87ef4fb737df8428c7a19d8f9d8d1e
-
SSDEEP
3072:6JMOP+PccSqxNchOpjvafjLJT8Ijy+oCGN404N4OMPc05vVmyOEQXcEzf8:SavafjLdoCBMPzmyOEQXcEzf8
Behavioral task
behavioral1
Sample
9fdc00dda6150fec55c7280303df75b5
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
68.183.192.227:69
Targets
-
-
Target
9fdc00dda6150fec55c7280303df75b5
-
Size
148KB
-
MD5
9fdc00dda6150fec55c7280303df75b5
-
SHA1
1def6c469048a1d26fe6296b434fbc41999767ef
-
SHA256
f291e754f64343d42d96568872e9a9da76c3656693099f3da042fe5b02dc8584
-
SHA512
dd3bc9886980188a79b8ad1a828bde2a30a7a1be9e283f72a48349539e12d1c0be5f1359756fe9783e4fbf9def7171a12c87ef4fb737df8428c7a19d8f9d8d1e
-
SSDEEP
3072:6JMOP+PccSqxNchOpjvafjLJT8Ijy+oCGN404N4OMPc05vVmyOEQXcEzf8:SavafjLdoCBMPzmyOEQXcEzf8
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-