Behavioral task
behavioral1
Sample
3a345bdc24ebc5e3db62933fa761ca97.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
3a345bdc24ebc5e3db62933fa761ca97.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
3a345bdc24ebc5e3db62933fa761ca97.elf
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
3a345bdc24ebc5e3db62933fa761ca97.elf
Resource
debian9-mipsel-20221111-en
General
-
Target
3a345bdc24ebc5e3db62933fa761ca97.elf
-
Size
102KB
-
MD5
3a345bdc24ebc5e3db62933fa761ca97
-
SHA1
0be76f6fb41fdef7e2950106d64e11a81b6aeb3a
-
SHA256
36ca769e6e397bff0c119316c76ca9e539daeb64b785611822a8629b57a23b92
-
SHA512
2a5312339476c018d500488b3234b2e4fbf4a54db5adc534b33debbb5383e39852a79da1f01b1f3dcd558cf28f3b73309cc9c0cc71314ce626f233566d586dd1
-
SSDEEP
1536:SlUz4qaKHDRXmaKASi1jjMWYXCHeCvo08AT8ymK4epbbSLEn/6NS:SlMaKHVXsAPjMOen8ZmHepbbqEn/6NS
Malware Config
Extracted
gafgyt
255.255.255.255:1900
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
3a345bdc24ebc5e3db62933fa761ca97.elf.elf linux sh