Behavioral task
behavioral1
Sample
a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral2
Sample
a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf
Resource
debian9-mipsel-20221111-en
General
-
Target
f4340ce6eed306b1090e5dbafe61539e.bin
-
Size
48KB
-
MD5
9770733131522fb32a3353b1986d879a
-
SHA1
90a516cfc92a58fc1b3dcc91e400fcd2a502d464
-
SHA256
4787a679c09c9c2356a91d25d02432aebaabe4e9cec32907d376200d18f33efa
-
SHA512
b9846c6eb3d7c6e9eb9ffb8b3b159f30d2e4e6a2c88b6aaeca31fa8714baeaf8133d3de2979ffc65da839a694d95337c78a3e2e0af6eeb0662b7640a72ff37f4
-
SSDEEP
768:gGYIQU4oVPPlFLKn+Se2D3v+dR1BrF6svPQoaccLOelCKxcio3eK63L2E8hi:lxQLW7LI+d42rLrQsvofckl4h3eV38o
Malware Config
Extracted
gafgyt
176.111.173.27:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf family_gafgyt -
Gafgyt family
Files
-
f4340ce6eed306b1090e5dbafe61539e.bin.zip
Password: infected
-
a30cb3cace5c987037b58943ab419bdc3a9f9ee4f4c5529b3b7002de130513da.elf.elf linux sh