General
- Target a675bf956f3ba50bdff631d2e2bd9b62.elf
- Size 150KB
- Sample240401-w1f2eaca43
- SHA256 aaef77108648df18c61d1da23ec384fa62fe17e559da38ec128911437cdf939c
- MD5 a675bf956f3ba50bdff631d2e2bd9b62
- SHA1 6117bdb7d0c394451d3f74775670c04c7ea9aeea
- SHA512 25216854b44c8711a514460662f35fbf7d3be9d424ba2e0cfd0ded492bc89662792beb85ee4f6cf9d401d5cce92b47c41ac6772281e5b674505f2f373c4ba5fb
- SSDEEP 3072:AvtLZpuGPyaT/05hKWEfSaWURxuZq+1uPNd5R:cQOR05hKWLURxuZq+1uPNd5R
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
a675bf956f3ba50bdff631d2e2bd9b62.elf
Resource
debian9-mipsbe-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
94.156.64.4:42516
Targets
-
- Target a675bf956f3ba50bdff631d2e2bd9b62.elf
- Size 150KB
- SHA256 aaef77108648df18c61d1da23ec384fa62fe17e559da38ec128911437cdf939c
- MD5 a675bf956f3ba50bdff631d2e2bd9b62
- SHA1 6117bdb7d0c394451d3f74775670c04c7ea9aeea
- SHA512 25216854b44c8711a514460662f35fbf7d3be9d424ba2e0cfd0ded492bc89662792beb85ee4f6cf9d401d5cce92b47c41ac6772281e5b674505f2f373c4ba5fb
- SSDEEP 3072:AvtLZpuGPyaT/05hKWEfSaWURxuZq+1uPNd5R:cQOR05hKWLURxuZq+1uPNd5R
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Changes its process name
-
Writes DNS configuration
Writes data to DNS resolver config file.