General
-
Target
8cc4e7f4f48f3d7281c9b85e3b251eda.elf
-
Size
124KB
-
Sample
240409-s62zaabc49
-
MD5
8cc4e7f4f48f3d7281c9b85e3b251eda
-
SHA1
5c5c2421a8e6f0084a6e6014f157002c0b399cd0
-
SHA256
258e96bd73be2ceb5d0aaf94ea1d055a64a49cd510982ec3e24639e0d4194728
-
SHA512
f2f57870b6b3bf12f0e1aa821409a128b3be81f88113b33af57ce75860b9f5525bfa94b0e1c2616a4df78367751f538881cb7d9a5eaa2e91891806189fcfc566
-
SSDEEP
3072:EWpbc37+Qp2nrkGJc/s5h1Y7rCmJC0OzQaGyPZk:E9Lyc/s5h1XmJC0OzQaGyPZk
Behavioral task
behavioral1
Sample
8cc4e7f4f48f3d7281c9b85e3b251eda.elf
Resource
ubuntu1804-amd64-20240226-en
Malware Config
Extracted
gafgyt
159.100.30.207:666
Targets
-
-
Target
8cc4e7f4f48f3d7281c9b85e3b251eda.elf
-
Size
124KB
-
MD5
8cc4e7f4f48f3d7281c9b85e3b251eda
-
SHA1
5c5c2421a8e6f0084a6e6014f157002c0b399cd0
-
SHA256
258e96bd73be2ceb5d0aaf94ea1d055a64a49cd510982ec3e24639e0d4194728
-
SHA512
f2f57870b6b3bf12f0e1aa821409a128b3be81f88113b33af57ce75860b9f5525bfa94b0e1c2616a4df78367751f538881cb7d9a5eaa2e91891806189fcfc566
-
SSDEEP
3072:EWpbc37+Qp2nrkGJc/s5h1Y7rCmJC0OzQaGyPZk:E9Lyc/s5h1XmJC0OzQaGyPZk
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-