General
-
Target
98ed402f271e026ad362d4ebc30e1a5e04578c81cb7702bc60af7c263b0f46c5.elf
-
Size
191KB
-
Sample
240313-c1vp1sae5t
-
MD5
0f071d9b13631c82b360d5857f6550c7
-
SHA1
91809625d0fa0094fb9dd7b924f0c10af2f30ad0
-
SHA256
98ed402f271e026ad362d4ebc30e1a5e04578c81cb7702bc60af7c263b0f46c5
-
SHA512
21536e2dd696a5fba641519b1d8f11ff4935b78f854aedbc829789b57ca1c9fc8703fc2bff039066c768de36bed643f7bfa2ce20d1405fcba1956c78eed261ac
-
SSDEEP
3072:KYq4CGXq11zXqwL5StNZf1t3aLUUGPNEibtNf8eNgJs12phvc5PsEsEUxxQLqJl2:Kl5nXrSo95pbpMoZCQ9gOS1SeX
Behavioral task
behavioral1
Sample
98ed402f271e026ad362d4ebc30e1a5e04578c81cb7702bc60af7c263b0f46c5.elf
Resource
debian9-armhf-20240226-en
Malware Config
Extracted
gafgyt
91.92.251.251:812
Targets
-
-
Target
98ed402f271e026ad362d4ebc30e1a5e04578c81cb7702bc60af7c263b0f46c5.elf
-
Size
191KB
-
MD5
0f071d9b13631c82b360d5857f6550c7
-
SHA1
91809625d0fa0094fb9dd7b924f0c10af2f30ad0
-
SHA256
98ed402f271e026ad362d4ebc30e1a5e04578c81cb7702bc60af7c263b0f46c5
-
SHA512
21536e2dd696a5fba641519b1d8f11ff4935b78f854aedbc829789b57ca1c9fc8703fc2bff039066c768de36bed643f7bfa2ce20d1405fcba1956c78eed261ac
-
SSDEEP
3072:KYq4CGXq11zXqwL5StNZf1t3aLUUGPNEibtNf8eNgJs12phvc5PsEsEUxxQLqJl2:Kl5nXrSo95pbpMoZCQ9gOS1SeX
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-