General
- Target qkdjdjj22.arm4.elf
- Size 204KB
- Sample240702-glw2rasgnq
- SHA256 658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0
- MD5 d2edb52b694fde72534058e5bb89b290
- SHA1 b0f691645e4b76ff6d5f7e53bb837a0e1c2bd0ac
- SHA512 81663bd64b26bb2674d7e31e3066b40651372b3b87687fa7195f4127cef9bc4f0cc7455ae657a572259029591da418ff4a00e38584f38888b6cc0afebf9d2ef1
- SSDEEP 6144:FZzyacCwXJ4DbpW0vV5hbL6nWgV7Ocgym0wfB5RyAn:FZzyacCwXJ4gC5hbLi3gym0mB5RyAn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
qkdjdjj22.arm4.elf
Resource
debian12-armhf-20240221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
195.85.205.47:777
Targets
-
- Target qkdjdjj22.arm4.elf
- Size 204KB
- SHA256 658cfebc1b0b65b9db78c4c8ecd902dd088541917e18c8fea1b5e8d56ab2c7a0
- MD5 d2edb52b694fde72534058e5bb89b290
- SHA1 b0f691645e4b76ff6d5f7e53bb837a0e1c2bd0ac
- SHA512 81663bd64b26bb2674d7e31e3066b40651372b3b87687fa7195f4127cef9bc4f0cc7455ae657a572259029591da418ff4a00e38584f38888b6cc0afebf9d2ef1
- SSDEEP 6144:FZzyacCwXJ4DbpW0vV5hbL6nWgV7Ocgym0wfB5RyAn:FZzyacCwXJ4gC5hbLi3gym0mB5RyAn
- MD5 SHA1 SHA512 SSDEEP
Score6/10Reads system routing table
Gets active network interfaces from /proc virtual filesystem.