Behavioral task
behavioral1
Sample
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral2
Sample
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf
Resource
debian9-mipsel-20221111-en
General
-
Target
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf
-
Size
110KB
-
MD5
848ba04d1cc0ee00cb4fc4f38cc7c1d2
-
SHA1
db59c5312940516a9d2f89747f96954c77c52a97
-
SHA256
3c519281cb34cf88e05170fb6cb665a8e16ad3718e886595344f25b7c10c34d0
-
SHA512
6343613551e45a89cc256e04917d40eee9f2c9fff2e3fea0202b1bbd511a4dd6584b3734591d72c0c6ae8101f70cdcb9bdcc3f7af7508e53522b6b9bfad57da5
-
SSDEEP
3072:WD3l+XQzPeV91310pWudSKakpNDtm2pgYMidIP1W:WD3l+XQzPe713CpWCSypxtm2pgYMidIQ
Malware Config
Extracted
gafgyt
172.104.44.216:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
848ba04d1cc0ee00cb4fc4f38cc7c1d2.elf.elf linux ppc