General
-
Target
679cbf946cde90451aaa7c6ea71c5cd1.elf
-
Size
141KB
-
Sample
240429-qnyg2aca2s
-
MD5
679cbf946cde90451aaa7c6ea71c5cd1
-
SHA1
1a38e4401dc53a248c277d12479b9063ce0f8f95
-
SHA256
9b718997c88a17e3a8ad9f671e854d69243b1fbf7a9c60bcfe2e9f8a0e98ed6d
-
SHA512
e4df55fd515a0b98762f9ae7e47b67dab09999c27f76f60f7fad0fda6d7df0678fd4c5c5794a6b6da830391d0bea4b10528df1f0bd66290e55ff10708d398feb
-
SSDEEP
3072:/BRB9nRvhcaHEqM5hzfrkav3Um0/5ApYADn:/jBLrEqM5hzzkCUm0/5ASADn
Behavioral task
behavioral1
Sample
679cbf946cde90451aaa7c6ea71c5cd1.elf
Resource
debian12-mipsel-20240221-en
Malware Config
Extracted
gafgyt
5.42.100.119:4258
Targets
-
-
Target
679cbf946cde90451aaa7c6ea71c5cd1.elf
-
Size
141KB
-
MD5
679cbf946cde90451aaa7c6ea71c5cd1
-
SHA1
1a38e4401dc53a248c277d12479b9063ce0f8f95
-
SHA256
9b718997c88a17e3a8ad9f671e854d69243b1fbf7a9c60bcfe2e9f8a0e98ed6d
-
SHA512
e4df55fd515a0b98762f9ae7e47b67dab09999c27f76f60f7fad0fda6d7df0678fd4c5c5794a6b6da830391d0bea4b10528df1f0bd66290e55ff10708d398feb
-
SSDEEP
3072:/BRB9nRvhcaHEqM5hzfrkav3Um0/5ApYADn:/jBLrEqM5hzzkCUm0/5ASADn
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-