General
-
Target
0ec2e5deabf9751adbfe71c34c576162.elf
-
Size
183KB
-
Sample
240417-sy7jssfe51
-
MD5
0ec2e5deabf9751adbfe71c34c576162
-
SHA1
e6f582614d529b3d52d672d47d5bebeca16c5a3e
-
SHA256
9c7f1fd869cf1ab94b4f2e55f3626293de4fd52dcbd52b04b3075e01cc76c28d
-
SHA512
c34764db320c63bec1ea2449709ba48c7c9131bbf41ecfbde2be42e933bde1dc55c0e0850b5130d5bb3491f88d9c8243bfe2948081c2095934e20ba8fffadf13
-
SSDEEP
3072:zAfnKPGD1aiaI0Jc+etJ8add9QzhsIPLpdfi+8qLw/i+L9k:yKOD17ELetJ8addQVFdfi+8qLwa+L9k
Behavioral task
behavioral1
Sample
0ec2e5deabf9751adbfe71c34c576162.elf
Resource
debian9-mipsbe-20240226-en
Malware Config
Extracted
gafgyt
85.239.55.70:515
Targets
-
-
Target
0ec2e5deabf9751adbfe71c34c576162.elf
-
Size
183KB
-
MD5
0ec2e5deabf9751adbfe71c34c576162
-
SHA1
e6f582614d529b3d52d672d47d5bebeca16c5a3e
-
SHA256
9c7f1fd869cf1ab94b4f2e55f3626293de4fd52dcbd52b04b3075e01cc76c28d
-
SHA512
c34764db320c63bec1ea2449709ba48c7c9131bbf41ecfbde2be42e933bde1dc55c0e0850b5130d5bb3491f88d9c8243bfe2948081c2095934e20ba8fffadf13
-
SSDEEP
3072:zAfnKPGD1aiaI0Jc+etJ8add9QzhsIPLpdfi+8qLw/i+L9k:yKOD17ELetJ8addQVFdfi+8qLwa+L9k
Score7/10-
Changes its process name
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-