General
- Target f091e9ebbd9546a2716560b35a9d75b6.bin
- Size 50KB
- Sample240329-e68j6shh4t
- SHA256 afdd9f2b9442d591ab236af25c6b881208bfea4e5db5ac0b517b90b5651b2166
- MD5 ce8ac7d3588bdd10bb39ebc07ed9760c
- SHA1 887a177b8df9c931e485c540e9aa9e28ea216540
- SHA512 e19bad1c2154fc1d46403822dcfc873faf45412eb823319a2dbfa8d24d1098cb092c569ef760675115f4a7ab0171ba9a84a318ad5be2151ab08d37448ff3704b
- SSDEEP 768:4VsiqKzKV415cO3yEvPCW8Q2uC8gAlVA5aAumfVyApWJTmUf4m2Wq/1COSHUABcG:45qr6EEiWwuvLA5+4BpWxCCZHUABxGRm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
7417f35c360fbddeaa50dd8789950b999de6d1f626da9a569778e53c7280a879.elf
Resource
debian9-mipsel-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
45.145.42.90:4444
Targets
-
- Target 7417f35c360fbddeaa50dd8789950b999de6d1f626da9a569778e53c7280a879.elf
- Size 136KB
- SHA256 7417f35c360fbddeaa50dd8789950b999de6d1f626da9a569778e53c7280a879
- MD5 f091e9ebbd9546a2716560b35a9d75b6
- SHA1 fcac5e1f767d9e84bfb29a5eb41468b31ff214d9
- SHA512 8284727a858a0043eb89373051b49c721bf7c1079ba0679ce9b03dbd05dbd18acbc50422236b439e498ac23e176f557b91c6fb3f3b4d7245f97d3facaeab3add
- SSDEEP 1536:V02ejdpEfpzX4zCEF8QuIbKl8hPrQa4BphyvzF2DxmQKBcvYYxCh:V0vQXACE6NOhTQPpZxmtBcAYxCh
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.