General
- Target aca5b2bc970f57f90a00af538ed2d2e0.elf
- Size 143KB
- Sample240107-x9jpbsdeb8
- SHA256 7653f63128bc8a4ba8844c8593c9744c90d7e7f5a286510cf4cca0a0ac168a63
- MD5 aca5b2bc970f57f90a00af538ed2d2e0
- SHA1 b8ad598158251c63b02e524b1ac7436565ecb8ef
- SHA512 7266508d5c225cd562c409fb66de2f9aa3f06499b6bf0416b3479af5ce088468906911d4405fd2f0568d567e7f09c4b3be675a992857dcf61087808be7604192
- SSDEEP 3072:1Atu6SxI/5ZIUj6QP/5NOX6sILJ+DAlwgqVItFhq1TB3OotUmkmZF01TpM2ke:omclhtFhqfUmkmZF01TpM2ke
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
aca5b2bc970f57f90a00af538ed2d2e0.elf
Resource
debian9-mipsbe-20231222-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
91.188.223.158:717
Targets
-
- Target aca5b2bc970f57f90a00af538ed2d2e0.elf
- Size 143KB
- SHA256 7653f63128bc8a4ba8844c8593c9744c90d7e7f5a286510cf4cca0a0ac168a63
- MD5 aca5b2bc970f57f90a00af538ed2d2e0
- SHA1 b8ad598158251c63b02e524b1ac7436565ecb8ef
- SHA512 7266508d5c225cd562c409fb66de2f9aa3f06499b6bf0416b3479af5ce088468906911d4405fd2f0568d567e7f09c4b3be675a992857dcf61087808be7604192
- SSDEEP 3072:1Atu6SxI/5ZIUj6QP/5NOX6sILJ+DAlwgqVItFhq1TB3OotUmkmZF01TpM2ke:omclhtFhqfUmkmZF01TpM2ke
- MD5 SHA1 SHA512 SSDEEP
Score6/10Reads system routing table
Gets active network interfaces from /proc virtual filesystem.