General
-
Target
b58ea92c95fbdac66443969f03b22e88
-
Size
203KB
-
Sample
231220-p9bdyscfdl
-
MD5
b58ea92c95fbdac66443969f03b22e88
-
SHA1
405476ede399275cf163473c3be538571d8198c8
-
SHA256
75f355c2008c5eaf57238029928bc26e6fcc0b9201bfb8ea45aa22aa9c4b7b06
-
SHA512
be7db771399346edde311e38e6d43a9f4b1a6ba2efeabe7f5a575b352e70f907bcc6924e563bf7e939f9d76c8d787cabea0f145273218b04905e30150102b3b2
-
SSDEEP
3072:lvEDigYQ9ACfN+MIjkWX4dT6+IYuyIJWtT9raedxGz2KP9LKO4VmNZKhu4FCtZp2:lvEDVK3BaL2gfDAu9n/1qxFmyN4942Yk
Behavioral task
behavioral1
Sample
b58ea92c95fbdac66443969f03b22e88
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
173.212.234.54:2545
Targets
-
-
Target
b58ea92c95fbdac66443969f03b22e88
-
Size
203KB
-
MD5
b58ea92c95fbdac66443969f03b22e88
-
SHA1
405476ede399275cf163473c3be538571d8198c8
-
SHA256
75f355c2008c5eaf57238029928bc26e6fcc0b9201bfb8ea45aa22aa9c4b7b06
-
SHA512
be7db771399346edde311e38e6d43a9f4b1a6ba2efeabe7f5a575b352e70f907bcc6924e563bf7e939f9d76c8d787cabea0f145273218b04905e30150102b3b2
-
SSDEEP
3072:lvEDigYQ9ACfN+MIjkWX4dT6+IYuyIJWtT9raedxGz2KP9LKO4VmNZKhu4FCtZp2:lvEDVK3BaL2gfDAu9n/1qxFmyN4942Yk
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-