General
- Target assailant.mips.elf
- Size 150KB
- Sample260620-p42c7ae12m
- SHA256 28a8fd63053552448f5571b1c08065e8acd21985610a3135e71a524a3e68d0c0
- MD5 2bd88e6dedf4f0356a95a72649098f1a
- SHA1 859d8bc5eeb2d527956873ba99b1a210669fbea7
- SHA512 c333e747a873d7f212312d31d9c4d514abb80c5f40349c9f67ccfa576f0e110d2b65ed0bd7a0b32587e7bb0898a55a0337aa081732f120db09b5ab80ad7b09aa
- SSDEEP 3072:3C0dBwQf7g8+t+25hKGx8YlxRxulq+1uPNd5R:yCvUM25hKGxblxRxulq+1uPNd5R
- TLSH T16CE3656E7E21AFBEE268C63107F75F708395219326A19382E26CDB185F7128D1C5F790
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
assailant.mips.elf
Resource
debian9-mipsbe-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
203.159.90.249:42516
Targets
-
- Target assailant.mips.elf
- Size 150KB
- SHA256 28a8fd63053552448f5571b1c08065e8acd21985610a3135e71a524a3e68d0c0
- MD5 2bd88e6dedf4f0356a95a72649098f1a
- SHA1 859d8bc5eeb2d527956873ba99b1a210669fbea7
- SHA512 c333e747a873d7f212312d31d9c4d514abb80c5f40349c9f67ccfa576f0e110d2b65ed0bd7a0b32587e7bb0898a55a0337aa081732f120db09b5ab80ad7b09aa
- SSDEEP 3072:3C0dBwQf7g8+t+25hKGx8YlxRxulq+1uPNd5R:yCvUM25hKGxblxRxulq+1uPNd5R
- TLSH T16CE3656E7E21AFBEE268C63107F75F708395219326A19382E26CDB185F7128D1C5F790
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Writes DNS configuration
Writes data to DNS resolver config file.