Behavioral task
behavioral1
Sample
8be11a67ddc3221030aade31953a8baa.elf
Resource
ubuntu1804-amd64-20221111-en
Behavioral task
behavioral2
Sample
8be11a67ddc3221030aade31953a8baa.elf
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
8be11a67ddc3221030aade31953a8baa.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
8be11a67ddc3221030aade31953a8baa.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
8be11a67ddc3221030aade31953a8baa.elf
-
Size
79KB
-
MD5
8be11a67ddc3221030aade31953a8baa
-
SHA1
cb16c110cc785a979a1752f2d6ea3840aada88d7
-
SHA256
17a952050a6fd5737f650dd6b68c514c9a74e1bc84169f9c4b5f8c6417ab8043
-
SHA512
e0bd748b9b0aedda8abb3ff94eade5cf2e737e303b5930d82c696bc685f70906b2432c38346b4300466cad3647dbfa5f1b0f9024dc09268b93b29bf4ffcc8a77
-
SSDEEP
1536:lQ2P4MoLMZ1wl85JuGp7kchcSj3Sv/Rz8kCjGhBEmQ7Vh2jqnaz7e:ldzoLMZ1wltGl/cSj3Up/hBEmQ7Vh2uX
Malware Config
Extracted
gafgyt
5.206.227.132:158
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
8be11a67ddc3221030aade31953a8baa.elf.elf linux ppc