Behavioral task
behavioral1
Sample
cab880e80054f589d41699cde51d70f2.elf
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral2
Sample
cab880e80054f589d41699cde51d70f2.elf
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral3
Sample
cab880e80054f589d41699cde51d70f2.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
cab880e80054f589d41699cde51d70f2.elf
Resource
debian9-mipsel-20221125-en
General
-
Target
cab880e80054f589d41699cde51d70f2.elf
-
Size
84KB
-
MD5
cab880e80054f589d41699cde51d70f2
-
SHA1
2debb6821bf4ecdc41e511d04c911156e4599110
-
SHA256
dbf1eac3d2464ac5574650f6807ec8f2520048c52fbcf3fb5c0b0df8049c6fe8
-
SHA512
eeadf68032956ef4613b6bb16740efdf5eecbf12b969073098f7d248996fa945cb286b9a5f10bffc8b5f711e74afc8f5436475735a6205132b876590bca0e5c1
-
SSDEEP
1536:ZbUHH04mSbmD8GAU2zxSydjm1RkiON6zcjzU7+BePvcLtmzsKVqmjhRf5Ze:962SCd2zxSydjmvkiIU7+BePvCtmYKVq
Malware Config
Extracted
gafgyt
194.59.31.34:65509
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
cab880e80054f589d41699cde51d70f2.elf.elf linux