General
-
Target
0791970ed5e80bcc8867a82336c6e8b85c8c4031c63162245118ff8d0b6d451c.elf
-
Size
103KB
-
Sample
240319-cgj46sed28
-
MD5
05819b6fb40955d8228c949eaed1e4cb
-
SHA1
e73883c20d0d46778ef23f6dd06c6a6884fc15f2
-
SHA256
0791970ed5e80bcc8867a82336c6e8b85c8c4031c63162245118ff8d0b6d451c
-
SHA512
9c9f95099d7d518941f95438239d6a773f4c320d096be05092c957a7f1806206c00230d4aa701438c512e2093a44d016dce8abe23f32281e5e5149c02d9a6c53
-
SSDEEP
3072:Ds2prtXl7gECRpVB1xWRfmRfmCayQzW0Mygxe:BprtXlc5VPxWUfmCayQzW0Mygxe
Behavioral task
behavioral1
Sample
0791970ed5e80bcc8867a82336c6e8b85c8c4031c63162245118ff8d0b6d451c.elf
Resource
debian9-armhf-20240226-en
Malware Config
Extracted
gafgyt
217.18.63.132:707
Targets
-
-
Target
0791970ed5e80bcc8867a82336c6e8b85c8c4031c63162245118ff8d0b6d451c.elf
-
Size
103KB
-
MD5
05819b6fb40955d8228c949eaed1e4cb
-
SHA1
e73883c20d0d46778ef23f6dd06c6a6884fc15f2
-
SHA256
0791970ed5e80bcc8867a82336c6e8b85c8c4031c63162245118ff8d0b6d451c
-
SHA512
9c9f95099d7d518941f95438239d6a773f4c320d096be05092c957a7f1806206c00230d4aa701438c512e2093a44d016dce8abe23f32281e5e5149c02d9a6c53
-
SSDEEP
3072:Ds2prtXl7gECRpVB1xWRfmRfmCayQzW0Mygxe:BprtXlc5VPxWUfmCayQzW0Mygxe
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-