General
-
Target
16e9872575640c2f06bace23af5cf4063893f431ce7c3f37449025d90394d0c5.elf
-
Size
124KB
-
Sample
240213-dk2dasfc39
-
MD5
3eb06aa165154d1119dd76bfbf3e2c88
-
SHA1
dff8d4b487621bcabfc137ee1a9df0f054e049c9
-
SHA256
16e9872575640c2f06bace23af5cf4063893f431ce7c3f37449025d90394d0c5
-
SHA512
db1bf287fefc68822cb11959b8b3498c069f0dbe9a574323166d631d23314ced88c95a34c15ddfb247c1a5fa5a64d52af229afd8be31b66980b90531cb6ba4df
-
SSDEEP
3072:KdB2qwap6KVXPi4jv8x+GMDkmDhZmTQOIsXAqE:aRwap6Kt6+GMDHZmTQOICAqE
Behavioral task
behavioral1
Sample
16e9872575640c2f06bace23af5cf4063893f431ce7c3f37449025d90394d0c5.elf
Resource
debian9-armhf-20231215-en
Malware Config
Extracted
gafgyt
95.123.85.55:839
Targets
-
-
Target
16e9872575640c2f06bace23af5cf4063893f431ce7c3f37449025d90394d0c5.elf
-
Size
124KB
-
MD5
3eb06aa165154d1119dd76bfbf3e2c88
-
SHA1
dff8d4b487621bcabfc137ee1a9df0f054e049c9
-
SHA256
16e9872575640c2f06bace23af5cf4063893f431ce7c3f37449025d90394d0c5
-
SHA512
db1bf287fefc68822cb11959b8b3498c069f0dbe9a574323166d631d23314ced88c95a34c15ddfb247c1a5fa5a64d52af229afd8be31b66980b90531cb6ba4df
-
SSDEEP
3072:KdB2qwap6KVXPi4jv8x+GMDkmDhZmTQOIsXAqE:aRwap6Kt6+GMDHZmTQOICAqE
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-