General
-
Target
b1119af9ab767942c6e84abd51030f16.elf
-
Size
112KB
-
Sample
240228-qcmldscc68
-
MD5
b1119af9ab767942c6e84abd51030f16
-
SHA1
cbf5a688bc409cf8b50c3308b94ed15478ccb1bd
-
SHA256
1fcc576fe855dcab37699cc0fbd041648d3bb073a66495eceb078f1786146839
-
SHA512
0b02342f853e66c9f7c4800966b54f1e792060c235feba2c9529fae64572c535a432693f7c67c7af2387836443c6c39dc3e4f4bce1dff7f8b9016273a1581adf
-
SSDEEP
3072:45aHleVtrWxIgIZY6DFl6534bmXQOY5sXvxN:45aHleVhZY6DFY5IbmXQOY5CvxN
Behavioral task
behavioral1
Sample
b1119af9ab767942c6e84abd51030f16.elf
Resource
debian9-armhf-20240226-en
Malware Config
Extracted
gafgyt
143.198.50.169:999
Targets
-
-
Target
b1119af9ab767942c6e84abd51030f16.elf
-
Size
112KB
-
MD5
b1119af9ab767942c6e84abd51030f16
-
SHA1
cbf5a688bc409cf8b50c3308b94ed15478ccb1bd
-
SHA256
1fcc576fe855dcab37699cc0fbd041648d3bb073a66495eceb078f1786146839
-
SHA512
0b02342f853e66c9f7c4800966b54f1e792060c235feba2c9529fae64572c535a432693f7c67c7af2387836443c6c39dc3e4f4bce1dff7f8b9016273a1581adf
-
SSDEEP
3072:45aHleVtrWxIgIZY6DFl6534bmXQOY5sXvxN:45aHleVhZY6DFY5IbmXQOY5CvxN
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-