Behavioral task
behavioral1
Sample
fb2911491e066917f4a74f5e508f7ae7.elf
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
fb2911491e066917f4a74f5e508f7ae7.elf
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
fb2911491e066917f4a74f5e508f7ae7.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
fb2911491e066917f4a74f5e508f7ae7.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
fb2911491e066917f4a74f5e508f7ae7.elf
-
Size
111KB
-
MD5
fb2911491e066917f4a74f5e508f7ae7
-
SHA1
42bd44d737da6a0e50577be2145450e2370170a3
-
SHA256
9fc93ba0f3da99b6fe48d8306740aff07f97bf9aa1d8c84ef744b699c2c8b8b9
-
SHA512
8a436a59f617c7dfd71a2f39b20bd5dd5781fd5542a59d1bc5e7a78a5a32c6dc1dd196aeba4f23adee3a4721dd24b15b77fc809f0c828d54b3981f806edebe85
-
SSDEEP
3072:DG+3MNBCpCTyRQpimmrytKhs4OWlKhRm2pgYMx3IPtW:DHCTyRQuytAseuRm2pgYMx3IPtW
Malware Config
Extracted
gafgyt
45.134.11.110:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
fb2911491e066917f4a74f5e508f7ae7.elf.elf linux