General
-
Target
a62253013925e16c96bf1006e24c6c90b74d9f02af2496ecdb5462c902429ab6
-
Size
150KB
-
Sample
240715-gaznhatbra
-
MD5
c4c247bfa31bd6349ca80fe88969c485
-
SHA1
3bdd01f7748fdaddfd5481ede37f88cb02148ee2
-
SHA256
a62253013925e16c96bf1006e24c6c90b74d9f02af2496ecdb5462c902429ab6
-
SHA512
08a7bb8ab0155dff797d81a1551c949e4caead43fe9a8cb277855e4cb7c0d24b31f2398590714d20a27fe9c271f7dd5008837398de8cd92fa656f70c07269fea
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTA85hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTR5hWTGHIM/9ldmpwTsLS
Behavioral task
behavioral1
Sample
a62253013925e16c96bf1006e24c6c90b74d9f02af2496ecdb5462c902429ab6
Resource
debian9-armhf-20240611-en
Malware Config
Extracted
gafgyt
212.80.18.246:4258
Targets
-
-
Target
a62253013925e16c96bf1006e24c6c90b74d9f02af2496ecdb5462c902429ab6
-
Size
150KB
-
MD5
c4c247bfa31bd6349ca80fe88969c485
-
SHA1
3bdd01f7748fdaddfd5481ede37f88cb02148ee2
-
SHA256
a62253013925e16c96bf1006e24c6c90b74d9f02af2496ecdb5462c902429ab6
-
SHA512
08a7bb8ab0155dff797d81a1551c949e4caead43fe9a8cb277855e4cb7c0d24b31f2398590714d20a27fe9c271f7dd5008837398de8cd92fa656f70c07269fea
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTA85hWTGHJWM/9lxXmpwTsL/QMyn:he8aAEHKkdDTR5hWTGHIM/9ldmpwTsLS
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-