Benign Download

80d7d535edefb1846919e96ba320a18734f93e28c9a564575fc5cf5f6a828243.elf

Connects socket to remote host (Linux)Creates network socket (Linux)

SHA-25680d7d535edefb1846919e96ba320a18734f93e28c9a564575fc5cf5f6a828243

Evidence

Detects Linux.Trojan.Gafgyt 0x86f–0x92f

⋯3 more rows
0x89fd8488b7de8488b75b8e8eefdffff8b55.H.}.H.u.......U
0x8afcc01c28955b48b45b4c9c3554889e548....U..E...UH..H
0x8bf81ec9000000048897de8488975e04889......H.}.H.u.H.
⋯7 more rows

Direct syscall dispatch via mov-immediate 0x3360–0x35b0

⋯3 more rows
0x33908d44242048894424104883c010488b10.D$ H.D$.H...H..
0x33a0b8480000000f05483d00f0ffff4889c3.H.....H=....H..
0x33b0760fe82903000089da4883cbfff7da89v..).....H......
0x33c01089d84881c4d00000005bc35589fd53...H......[.U..S
0x33d04883ec084863fdb83c0000000f05483dH...Hc..<.....H=
0x33e000f0ffff4889c376ebe8f202000089da....H..v........
0x33f0f7da8910ebde9090534863f6b8150000........SHc.....
0x3400000f05483d00f0ffff4889c3760fe8cd...H=....H..v...
0x341002000089da4883cbfff7da891089d85b.....H.........[
0x3420c390909053b8500000000f05483d00f0....S.P.....H=..
0x3430ffff4889c3760fe8a402000089da4883..H..v........H.
0x3440cbfff7da891089d85bc39090534863ff........[...SHc.
0x3450b8030000000f05483d00f0ffff4889c3.......H=....H..
0x3460760fe87902000089da4883cbfff7da89v..y.....H......
0x34701089d85bc390909053b8390000000f05...[....S.9.....
0x3480483d00f0ffff4889c3760fe850020000H=....H..v..P...
0x349089da4883cbfff7da891089d85bc39090..H.........[...
0x34a053b8270000000f05483d00f0ffff4889S.'.....H=....H.
0x34b0c3760fe82802000089da4883cbfff7da.v..(.....H.....
⋯6 more rows
0x3520fff7da891089d84881c4d00000005bc3.......H......[.
0x3530534863f64863ffb83e0000000f05483dSHc.Hc..>.....H=
0x354000f0ffff4889c3760fe89201000089da....H..v........
⋯7 more rows

Connects socket to remote host (Linux) 0x3f42–0x4012

⋯3 more rows
0x3f72415d415e415fc39090905389d24863ffA]A^A_....S..Hc.
0x3f82b82a0000000f05483d00f0ffff4889c3.*.....H=....H..
0x3f92760fe847f7ffff89da4883cbfff7da89v..G.....H......
0x3fa21089d85bc390534863ffb8330000000f...[..SHc..3....
⋯7 more rows

Creates network socket (Linux) 0x401f–0x414f

⋯3 more rows
0x404f90534589c94c63d14863ffb82c000000.SE..Lc.Hc..,...
0x405f0f05483d00f0ffff4889c3760fe86ff6..H=....H..v..o.
0x406fffff89da4883cbfff7da89104889d85b....H.......H..[
⋯3 more rows
0x40af891089d85bc3909090534863d24863f6....[....SHc.Hc.
0x40bf4863ffb8290000000f05483d00f0ffffHc..).....H=....
0x40cf4889c3760fe807f6ffff89da4883cbffH..v........H...
0x40dff7da891089d85bc390555389fb4881ec......[..US..H..
⋯7 more rows