General
-
Target
2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca.elf
-
Size
141KB
-
Sample
240903-bq3r7sshjl
-
MD5
96edc2bb63c60080a01c49420066e06a
-
SHA1
d0e579a8cdfaf628526077bd033c086e1579723f
-
SHA256
2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca
-
SHA512
612d795cb4d4e6d4015910a14b2ab64161cd5ab29b55afb1ca30943a522bfa921df4af6f85eaf440ca3c2de282517b6b972d3a5b57b169736d2498d86ffaafe7
-
SSDEEP
3072:sGGNZfCos2pA4FCv5hvikTam0/5ApYADn:hACyK40v5hvi9m0/5ASADn
Behavioral task
behavioral1
Sample
2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca.elf
Resource
debian9-mipsbe-20240611-en
Malware Config
Extracted
gafgyt
45.8.22.109:4258
Targets
-
-
Target
2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca.elf
-
Size
141KB
-
MD5
96edc2bb63c60080a01c49420066e06a
-
SHA1
d0e579a8cdfaf628526077bd033c086e1579723f
-
SHA256
2a9bc822a567acd10d811144d0c9094c82bbd469400cf0f5d6d2347e9ea476ca
-
SHA512
612d795cb4d4e6d4015910a14b2ab64161cd5ab29b55afb1ca30943a522bfa921df4af6f85eaf440ca3c2de282517b6b972d3a5b57b169736d2498d86ffaafe7
-
SSDEEP
3072:sGGNZfCos2pA4FCv5hvikTam0/5ApYADn:hACyK40v5hvi9m0/5ASADn
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-