General
-
Target
85e555a1a9164a2e34557421db938ebc.elf
-
Size
188KB
-
Sample
240315-wfq1wagh97
-
MD5
85e555a1a9164a2e34557421db938ebc
-
SHA1
53335c157b284a52a925b2ae7811a5f2f30bbf98
-
SHA256
f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60
-
SHA512
6d6ad5930bc241f4e579c53b45a228b7e76f38ae8959748d798adbb08855a0874227f96601c2cc5b1ad326923ab8a3c2605628da63deadfda97e1a8163163c03
-
SSDEEP
3072:xHWSb+eerH8csrW5hZxZOwBzhmv8uqx1LVnKoe:tkr49W5hZxZOwRhmv8uqx1LVnKoe
Behavioral task
behavioral1
Sample
85e555a1a9164a2e34557421db938ebc.elf
Resource
debian9-mipsbe-20240226-en
Malware Config
Extracted
gafgyt
78.40.117.218:23
Targets
-
-
Target
85e555a1a9164a2e34557421db938ebc.elf
-
Size
188KB
-
MD5
85e555a1a9164a2e34557421db938ebc
-
SHA1
53335c157b284a52a925b2ae7811a5f2f30bbf98
-
SHA256
f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60
-
SHA512
6d6ad5930bc241f4e579c53b45a228b7e76f38ae8959748d798adbb08855a0874227f96601c2cc5b1ad326923ab8a3c2605628da63deadfda97e1a8163163c03
-
SSDEEP
3072:xHWSb+eerH8csrW5hZxZOwBzhmv8uqx1LVnKoe:tkr49W5hZxZOwRhmv8uqx1LVnKoe
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-