General
-
Target
a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf
-
Size
150KB
-
Sample
240708-t2hkhsxgrp
-
MD5
1f929431fbac001c8df984490aaf2e55
-
SHA1
44f9b13e68c1d9c574eb9ec0c7edac25f0b7ea1a
-
SHA256
a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5
-
SHA512
4972f737388f463338a9470bb320b29fd580f0b24902081f7e9e09d7810ecfe39e90b002b56a7d83f57a8031da030a84fd42a1615df482868d5ed2ee01d1dd30
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAe5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTv5hWTGZWYxVldmpwTsLS
Behavioral task
behavioral1
Sample
a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf
Resource
debian12-armhf-20240418-en
Malware Config
Extracted
gafgyt
38.58.177.229:4258
Targets
-
-
Target
a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5.elf
-
Size
150KB
-
MD5
1f929431fbac001c8df984490aaf2e55
-
SHA1
44f9b13e68c1d9c574eb9ec0c7edac25f0b7ea1a
-
SHA256
a4bd519fe1220ed758336a19e1a1ff922d727d3db3eea8c66ab412cf259d5cd5
-
SHA512
4972f737388f463338a9470bb320b29fd580f0b24902081f7e9e09d7810ecfe39e90b002b56a7d83f57a8031da030a84fd42a1615df482868d5ed2ee01d1dd30
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAe5hWTGZWYxVlxXmpwTsL/QMyn:he8aAEHKkdDTv5hWTGZWYxVldmpwTsLS
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-