General
-
Target
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6.elf
-
Size
150KB
-
Sample
240903-bvhylavamh
-
MD5
65160e5914176a8c073c8808c0f37267
-
SHA1
52922ebec813c79a6debb17bd9aff2f300006ee3
-
SHA256
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6
-
SHA512
a0dad8aabe1db3838f24a034812e17e96ec424d4edc72044ee2aeb22f933589ca8a35f6cc805fbc8c2eea7cc516322a77f83cc4437e1c58fd7de78f13dfa1589
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTA95hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTI5hWTGU2WV7ldmpwTsLS
Behavioral task
behavioral1
Sample
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6.elf
Resource
debian12-armhf-20240418-en
Malware Config
Extracted
gafgyt
45.8.22.109:4258
Targets
-
-
Target
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6.elf
-
Size
150KB
-
MD5
65160e5914176a8c073c8808c0f37267
-
SHA1
52922ebec813c79a6debb17bd9aff2f300006ee3
-
SHA256
2f77809b11228f73d044c6eac5292759b659b00e89a9e76b1a8cd3f0d74d53d6
-
SHA512
a0dad8aabe1db3838f24a034812e17e96ec424d4edc72044ee2aeb22f933589ca8a35f6cc805fbc8c2eea7cc516322a77f83cc4437e1c58fd7de78f13dfa1589
-
SSDEEP
3072:Tdbmn8aAEHqgSkano1DTA95hWTGU2WV7lxXmpwTsL/QMyn:he8aAEHKkdDTI5hWTGU2WV7ldmpwTsLS
Score6/10-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-