General
- Target _1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988.elf
- Size 110KB
- Sample260620-p8fmaae16m
- SHA256 1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988
- MD5 baa67d1fae131dd2ef4022b695e2df64
- SHA1 52c4cebac510b0300b28079661cb6d0a968828c5
- SHA512 7818ab24c4a93ef1ed13fb76379bba7faa58fcd63cef2c2589caa8d410caab4de8c3380faf4e3a1d21d37f7f57841ed9998f19c6a7cb4d90dfb9070f51dcaa36
- SSDEEP 3072:Pl2n/WelPFo8NezN3/S2VvXqpha0fZPCZVOXinYuM8R:FIy4QN3KjphaQZPCZVOXinYuM8R
- TLSH T167B37D1B6292C6FAC08356B527DFA2A18423F67A0B36721B73D4BDA43F15CC95D2D381
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
_1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988.elf
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
gafgyt
C2
-
203.159.90.249:42516
Targets
-
- Target _1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988.elf
- Size 110KB
- SHA256 1ddcdf43d533e234a560a9625c33d5692bd403de65537acfe554427de1ace988
- MD5 baa67d1fae131dd2ef4022b695e2df64
- SHA1 52c4cebac510b0300b28079661cb6d0a968828c5
- SHA512 7818ab24c4a93ef1ed13fb76379bba7faa58fcd63cef2c2589caa8d410caab4de8c3380faf4e3a1d21d37f7f57841ed9998f19c6a7cb4d90dfb9070f51dcaa36
- SSDEEP 3072:Pl2n/WelPFo8NezN3/S2VvXqpha0fZPCZVOXinYuM8R:FIy4QN3KjphaQZPCZVOXinYuM8R
- TLSH T167B37D1B6292C6FAC08356B527DFA2A18423F67A0B36721B73D4BDA43F15CC95D2D381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Writes DNS configuration
Writes data to DNS resolver config file.