Behavioral task
behavioral1
Sample
5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
177ad6834d95fd87828e5503a0be68d2.bin
-
Size
36KB
-
MD5
06b1d61c22dde87180af8c7684a15cd7
-
SHA1
98b1901cc1f1bc2a136fe99cc7d17ff4f29a9357
-
SHA256
dffb16aedc4681879442c653632c60b352e18d63a984e8fce7eaea7a3dae64e7
-
SHA512
a7e6d285b9160bdeabe6d6c5ffd4ef8a5ddf2802843c13b7e91f05dbd7e1dde8190fe57d71ea9229f14939394f01598db52a89dc9e065057b45e697a6c44ad7f
-
SSDEEP
768:LTLcbOI93SjEM8fZ4Qx5vGiQxVL152uG5nLiBl92O/99nX2sNkHfThTe:LTZ03cz8fCQx5vGiQB52uG5nI92O/XmO
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf family_gafgyt -
Gafgyt family
Files
-
177ad6834d95fd87828e5503a0be68d2.bin.zip
Password: infected
-
5d3f6980e151a1b4b8aa5d5158be6f47735015f1e5821309badc53d0a8ffcb87.elf.elf linux ppc