General
- Target 5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf
- Size 215KB
- Sample240221-d2c22abb65
- SHA256 5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b
- MD5 837b48f5b175f1a10260c4de8fef167f
- SHA1 7699f4a1d796bc0be18659b8d72727f9678b2098
- SHA512 c2de432b3a7a2dda7bd1de859997cc4fae685fdd2588a0b676a808aabc0ace64b18cf6a32bed4022fd99f04e08fd406eabd90e6b788c5ef018dfe38cd0192081
- SSDEEP 6144:idJaAuDXmGYkKnpfPHM+MrtqvgBE6OCTI6c3m:idJaAmBdUPUr4vgBE6OCTI6Wm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf
Resource
debian9-armhf-20231215-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
239.255.255.250:1900
Targets
-
- Target 5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf
- Size 215KB
- SHA256 5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b
- MD5 837b48f5b175f1a10260c4de8fef167f
- SHA1 7699f4a1d796bc0be18659b8d72727f9678b2098
- SHA512 c2de432b3a7a2dda7bd1de859997cc4fae685fdd2588a0b676a808aabc0ace64b18cf6a32bed4022fd99f04e08fd406eabd90e6b788c5ef018dfe38cd0192081
- SSDEEP 6144:idJaAuDXmGYkKnpfPHM+MrtqvgBE6OCTI6c3m:idJaAmBdUPUr4vgBE6OCTI6Wm
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.