Behavioral task
behavioral1
Sample
ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral3
Sample
ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
9d7b5bd0fc8e72e28d9c748f1ecc4811.bin
-
Size
48KB
-
MD5
b9657fc9585f297f0428668d757f3988
-
SHA1
32a5f5686ebb216fabe1fd62e86023e002f29832
-
SHA256
c7517fafb48382d5ae4fa9c9441072efd88a3f5022063d877ffc1c51da7fa7f8
-
SHA512
ff0ddb94f1581861c5612058a7da2ccbc929a2f181d756b5c5ce3bd3a5f604bdd1068b6aaa5a8c95504f6880e7fac0a9f9336e1aca2d276ec6214681dfb84781
-
SSDEEP
768:zOa1QMV+piFjJfIOddHgoabNSSjMsFOzGHpjxxP8xVlq+eh9VuGcbh:zOaukz3PAxRMYjxxP0VKBk
Malware Config
Extracted
gafgyt
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf family_gafgyt -
Gafgyt family
Files
-
9d7b5bd0fc8e72e28d9c748f1ecc4811.bin.zip
Password: infected
-
ccadfe530835090afda7be358411caa8465fcd924eb3aea46a6972c76d405dac.elf.elf linux sparc