General
-
Target
40d63a0757e8dde632c5b9fba70a6267.elf
-
Size
149KB
-
Sample
240315-v92h2agf84
-
MD5
40d63a0757e8dde632c5b9fba70a6267
-
SHA1
874959e3178d3a92dfbbc9b9f8480939376e1605
-
SHA256
d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939
-
SHA512
ca22ddafe06163c13935dc72f4ac4d7b4e1600aa0f9a47b37d577b4cb869fd256eb0a9a55a52df0607e13077708d5f0dce6177b608291ec24b6be663a7599a03
-
SSDEEP
3072:p+BnodZnZcBpaLrEJZTVKhv5hKEeu0sCXOmOMDQ4DzsL6Qse:pqbDJZhCv5hKEeOcOmOMDQ4DzsL6Qse
Behavioral task
behavioral1
Sample
40d63a0757e8dde632c5b9fba70a6267.elf
Resource
debian9-armhf-20240226-en
Malware Config
Extracted
gafgyt
78.40.117.218:23
Targets
-
-
Target
40d63a0757e8dde632c5b9fba70a6267.elf
-
Size
149KB
-
MD5
40d63a0757e8dde632c5b9fba70a6267
-
SHA1
874959e3178d3a92dfbbc9b9f8480939376e1605
-
SHA256
d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939
-
SHA512
ca22ddafe06163c13935dc72f4ac4d7b4e1600aa0f9a47b37d577b4cb869fd256eb0a9a55a52df0607e13077708d5f0dce6177b608291ec24b6be663a7599a03
-
SSDEEP
3072:p+BnodZnZcBpaLrEJZTVKhv5hKEeu0sCXOmOMDQ4DzsL6Qse:pqbDJZhCv5hKEeOcOmOMDQ4DzsL6Qse
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-