General
-
Target
4197e002bf39bef8cb338cfa18b3be63.elf
-
Size
131KB
-
Sample
240310-xxmkfsad49
-
MD5
4197e002bf39bef8cb338cfa18b3be63
-
SHA1
f05692fef559d34b6a0baac4ffe6e2b7ee21cee7
-
SHA256
ab74b4b726b330617127e21d4eef75d068f0c8935991a4a213c0ded1f12a407c
-
SHA512
438be188d47947cb76d68dcc4fadd0f2478f2805b5e6609ac63726d09bff52dfdde7ec043271ca4751df3674aff4977037b0fb9471fb8cff72bd2d253aa70534
-
SSDEEP
1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqovd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1/vdlPUmkASFxBKvXZX
Behavioral task
behavioral1
Sample
4197e002bf39bef8cb338cfa18b3be63.elf
Resource
debian12-mipsel-20240221-en
Malware Config
Extracted
gafgyt
103.173.255.143:839
Targets
-
-
Target
4197e002bf39bef8cb338cfa18b3be63.elf
-
Size
131KB
-
MD5
4197e002bf39bef8cb338cfa18b3be63
-
SHA1
f05692fef559d34b6a0baac4ffe6e2b7ee21cee7
-
SHA256
ab74b4b726b330617127e21d4eef75d068f0c8935991a4a213c0ded1f12a407c
-
SHA512
438be188d47947cb76d68dcc4fadd0f2478f2805b5e6609ac63726d09bff52dfdde7ec043271ca4751df3674aff4977037b0fb9471fb8cff72bd2d253aa70534
-
SSDEEP
1536:o2beTpNb9DERkLMurNpZ3efJp68E1wYqovd00PUmkVmSFxBC7vXZX:o2cNJLlrvJF1/vdlPUmkASFxBKvXZX
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-