General
- Target i686
- Size 97KB
- Sample260421-w2w41set7y
- SHA256 237baa9e4af13c1326f7421d474401b06d836c7337b76b222d8676655392881e
- MD5 5327d651e2908ad9e8535a7e920dd098
- SHA1 3ccb7d535eedf8aa032b1f599b7f893fc3d9ec8b
- SHA512 8d7f8953e2b9631170770d1f0c702dbad3a7787843fe0c619c9564112d809961068e7cb80482962f2af2c34dac95e8be6b4f5bb9a89dbfc16d0559b7824b8145
- SSDEEP 3072:aPaqjPQP39VjGWX98732V7kGyNVe5heTe7FXnf0OzTyoQQub:ahQP39VjGWXW9NVe5h+0FXnf0OzTyoQ7
- TLSH T173A35B82D642C2F3C4430AF1029F965A0532FB3A8A3B9EAAF75D7CF49B129D53115B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
i686
Resource
ubuntu1804-amd64-20260126-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
85.11.167.21:666
Targets
-
- Target i686
- Size 97KB
- SHA256 237baa9e4af13c1326f7421d474401b06d836c7337b76b222d8676655392881e
- MD5 5327d651e2908ad9e8535a7e920dd098
- SHA1 3ccb7d535eedf8aa032b1f599b7f893fc3d9ec8b
- SHA512 8d7f8953e2b9631170770d1f0c702dbad3a7787843fe0c619c9564112d809961068e7cb80482962f2af2c34dac95e8be6b4f5bb9a89dbfc16d0559b7824b8145
- SSDEEP 3072:aPaqjPQP39VjGWX98732V7kGyNVe5heTe7FXnf0OzTyoQQub:ahQP39VjGWXW9NVe5h+0FXnf0OzTyoQ7
- TLSH T173A35B82D642C2F3C4430AF1029F965A0532FB3A8A3B9EAAF75D7CF49B129D53115B91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Writes DNS configuration
Writes data to DNS resolver config file.