Behavioral task
behavioral1
Sample
c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral3
Sample
c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
74e993d9550c12e5c4ca798ec693e2d1.bin
-
Size
44KB
-
MD5
7d8b3a7f10c63205760bfa9fe113ff56
-
SHA1
01356516813fd3cfa7b7b6743d54cd22e5b20807
-
SHA256
2ca6ded9df572264eb8f2acadb5a3e99626404fa25bcddb27dc3ca4473e13188
-
SHA512
f71265b4886e245e44e5336460a3d12f5b00dea44408eab17cd2af0fd94d60d964b1140a7dc0cf6623325fe03fbc113cc72cd1fa4fa151435e38baf4cc7e7889
-
SSDEEP
768:MY3kSZpeW6hi82k9qgR4yyIzqkV40LNAQzXMrtk6LbAnWeO0b7CptIctEJfgPrvu:MMkSD17vk0+4yyIzqkV4mNASXMrtfvAl
Malware Config
Extracted
gafgyt
176.111.173.27:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf family_gafgyt -
Gafgyt family
Files
-
74e993d9550c12e5c4ca798ec693e2d1.bin.zip
Password: infected
-
c2dc4bca07f217eecf4dc50e46bb1becf1941cec4da030de6ff2301a0e941925.elf.elf linux