Behavioral task
behavioral1
Sample
be3aa0524a13ff720938eb510a2774cb.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
be3aa0524a13ff720938eb510a2774cb.elf
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral3
Sample
be3aa0524a13ff720938eb510a2774cb.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
be3aa0524a13ff720938eb510a2774cb.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
be3aa0524a13ff720938eb510a2774cb.elf
-
Size
83KB
-
MD5
be3aa0524a13ff720938eb510a2774cb
-
SHA1
78a6e3c023a671489435519ad703f37e83a162f5
-
SHA256
3c0803fcd05a9865592b3708f069672924bbd01babdeffaae82e445524a45987
-
SHA512
4e8333d85af51b51bee588a8de9ce848272a53213271efd9feabaa5fc87b8e87d2f3c8d7ba502de8102b2fb5c88ece66ee102cfbb8fcdfdfdcde422cfea39633
-
SSDEEP
1536:ZGY9jUi/xK1le3dPhlRT16TJCIIBTILDmjHVqYLeRR/8Q:rbY1APhkTJPIB8mjHVqYqRR/8Q
Malware Config
Extracted
gafgyt
85.204.116.179:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
be3aa0524a13ff720938eb510a2774cb.elf.elf linux sh