General
-
Target
jasht.arm5
-
Size
150KB
-
Sample
240901-n38kfazdnm
-
MD5
36fe40767bd1aaedb514a496aa668255
-
SHA1
ffac1369fe5113390024f90335d54e83dc380072
-
SHA256
15b6d12a1da5a977416bb89aea1ca4b683366a5be988db8751cf1ace30a24416
-
SHA512
04e8923676422f8b522d26514be8c8ebcb539f40129fe1fd416ca38894a70fea959f7210c408195bf333fc9990e0fecafc09ef5425bb96ea9c7b5c73a0af4b84
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAe5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTf5hWTGU2WV7ldmpwTsLS
Behavioral task
behavioral1
Sample
jasht.arm5
Resource
debian12-armhf-20240729-en
Malware Config
Extracted
gafgyt
154.216.18.202:4258
Targets
-
-
Target
jasht.arm5
-
Size
150KB
-
MD5
36fe40767bd1aaedb514a496aa668255
-
SHA1
ffac1369fe5113390024f90335d54e83dc380072
-
SHA256
15b6d12a1da5a977416bb89aea1ca4b683366a5be988db8751cf1ace30a24416
-
SHA512
04e8923676422f8b522d26514be8c8ebcb539f40129fe1fd416ca38894a70fea959f7210c408195bf333fc9990e0fecafc09ef5425bb96ea9c7b5c73a0af4b84
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTAe5hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTf5hWTGU2WV7ldmpwTsLS
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-