General
- Target 5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495.elf
- Size 100KB
- Sample240629-bqsbgaxeke
- SHA256 5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495
- MD5 9692453cc4fc89e8fa1d55feb3812975
- SHA1 b3409baa0fd1e27563d1d3c49b78d83ac84d4126
- SHA512 51ccd4e22fb33b64567ae3f47b9532f3136a27d774bfe85af9e0ea1cd8a5cfabebe3699d69d32076adf73bc8d96215ecdc2503239190e6fae5eb0c8b7fe34147
- SSDEEP 1536:XeYViu+oIe/IvF+6BLFLbXJM9wyQdPjFrPnJrKLs7MuCms5TDUMHYr/:Xl+oT4+CZzfdP5/JrKLsCmITDfHYr/
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495.elf
Resource
ubuntu2404-amd64-20240523-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
176.97.114.45:666
Targets
-
- Target 5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495.elf
- Size 100KB
- SHA256 5d03b365be909a0a12963de430756131a603cb6d9ba31f5c87be3dc34c807495
- MD5 9692453cc4fc89e8fa1d55feb3812975
- SHA1 b3409baa0fd1e27563d1d3c49b78d83ac84d4126
- SHA512 51ccd4e22fb33b64567ae3f47b9532f3136a27d774bfe85af9e0ea1cd8a5cfabebe3699d69d32076adf73bc8d96215ecdc2503239190e6fae5eb0c8b7fe34147
- SSDEEP 1536:XeYViu+oIe/IvF+6BLFLbXJM9wyQdPjFrPnJrKLs7MuCms5TDUMHYr/:Xl+oT4+CZzfdP5/JrKLsCmITDfHYr/
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.