General
- Target 78087b17e06e36112c236670afeb2d76.bin
- Size 41KB
- Sample240408-br661scf54
- SHA256 9a777270e59ebe43513fc3f790350d8e628c09e015650f372c625c4a5a0d6103
- MD5 48702d0018a5bdde7860f6abea1e628d
- SHA1 c84bff88b9e093fef4ef57bc621120a6862fee96
- SHA512 c3c5bcf21c424cd8748604faad82780cf6639f8a81bdf12277f121f710e154b577e4407a9487a28c06ecdae644053229c15bf8c8dbe332a5a657ed9efbc64939
- SSDEEP 768:Ih3+B90c1qwH41n6Ms6hS4g875Hw+/rdFNP6kpFFN2a:I9+YsrH44whSIQM16y/2a
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
a6aeeeccdf980cd2458d73a2e0113ad52a3d3be15cd928098246aae61ed84e57.elf
Resource
ubuntu1804-amd64-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
93.123.85.166:606
Targets
-
- Target a6aeeeccdf980cd2458d73a2e0113ad52a3d3be15cd928098246aae61ed84e57.elf
- Size 91KB
- SHA256 a6aeeeccdf980cd2458d73a2e0113ad52a3d3be15cd928098246aae61ed84e57
- MD5 78087b17e06e36112c236670afeb2d76
- SHA1 958962136973dfe0ab57c962e4b91a71acb196dd
- SHA512 f5e48f7a0f67232a27ed47a49bba6486b17bebc0e547c0edb7137fe206e973b03ea0a0f0f7ddd0c55e77f45588d8a563eb4a8f6124110a281c2d7e1698e5f4a8
- SSDEEP 1536:cTprpwxUuswPzxN7hkcRqnJWS+z3MQmqj9mU+QVOz+sDTjYbu:gra2UxN7hkb8rz3Hr5m7QVOz+cTjYbu
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.