General
- Target ea27ee20e6abd5b35052df0741c6d11c.bin
- Size 45KB
- Sample240408-ce42kade71
- SHA256 13365d9607d74e47d7aeb7a80f28e0072d919137c14d3f871883d02ab19b23cc
- MD5 308ef741e1c4ce08f98aa7489ba10403
- SHA1 268f4a5be08f634a5f1a29d67ba517374f747b7d
- SHA512 cfe4577106b144b2a8f006ecffe56f7caecf77723b954c4e70c10825cf255c8187598fb82f007e75d924c79d4a72a0f08118639e449ab672079b7f867600c7f3
- SSDEEP 768:/86RRtXmAC6+nJP1TkBjgG78UqzY7TnbhvCHzhJ2OV163fvrvebqI8XP7EQtDxmt:/vRR90VnJtTg7v40TtvAT2U1gbecBi3d
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
4711cbdb3efc2d6b996d59e67cd3eab9ae9ec689236f0f17139702ca120fa266.elf
Resource
debian12-mipsel-20240221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
93.123.85.166:606
Targets
-
- Target 4711cbdb3efc2d6b996d59e67cd3eab9ae9ec689236f0f17139702ca120fa266.elf
- Size 140KB
- SHA256 4711cbdb3efc2d6b996d59e67cd3eab9ae9ec689236f0f17139702ca120fa266
- MD5 ea27ee20e6abd5b35052df0741c6d11c
- SHA1 05007595a118e4e24e79915cbbfe59f06a380c1b
- SHA512 1db928f4c02c8681c56defda7f26fed5e8c7f79d087804ca7d053052d55a215a4ae4f27b6c9bee5262484b7b3d4fc498ce5980a1cc9cc81ce47f0d495042a926
- SSDEEP 1536:hiSGeTzodTVVMYLZqRrCCtV3oFFFy+XBq9rS+mfo0mFB1DfnEuw4:hv08V3V+XM9rS+mfPmFB1DfEuw4
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.