Behavioral task
behavioral1
Sample
3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral3
Sample
3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
252ae2222088f6f04a129cd1f0be6383.bin
-
Size
45KB
-
MD5
4bd4fefcf5b21db36184d4aedf9dcf21
-
SHA1
ae8e38df4958b95d07ce0f134b491f2552e206b7
-
SHA256
62f1b2757cbbb4711c0f41541991dd17fef5f0584c695f1191f9c20b0402b67f
-
SHA512
329b2cead48efd753e1d290516af2507830d735d90f65f63703783378e11d57cf44d77cd8d81090830129240f04c63f96eab286f31e18d13143366392e4756d0
-
SSDEEP
768:hVnyQx9CJerKm0wWiR4UKl/GOIxL5+KFi6P6KGBqN30GnysTCE6ExJiMp5Q02WJv:/nF9CnmFWiRa/GOCDiHKEqNNnlCsXrQg
Malware Config
Extracted
gafgyt
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf family_gafgyt -
Gafgyt family
Files
-
252ae2222088f6f04a129cd1f0be6383.bin.zip
Password: infected
-
3ed568821de0658d8a11a31fd1d75f55910009387c1ab1305a55529b2938544c.elf.elf linux ppc