Behavioral task
behavioral1
Sample
04652bab6e2b0d35ace4fdaacb8e64bc.elf
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral2
Sample
04652bab6e2b0d35ace4fdaacb8e64bc.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
04652bab6e2b0d35ace4fdaacb8e64bc.elf
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
04652bab6e2b0d35ace4fdaacb8e64bc.elf
Resource
debian9-mipsel-20221111-en
General
-
Target
04652bab6e2b0d35ace4fdaacb8e64bc.elf
-
Size
110KB
-
MD5
04652bab6e2b0d35ace4fdaacb8e64bc
-
SHA1
68af3a6a4da122dadd751cce660b8e406aa3a61e
-
SHA256
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1
-
SHA512
41b5a8be3b6a31b8811f0444a9112dc4d08839648788066c205a301eb4915bd84acdb3e60d60e276c368e6e778dec9d023e046c91c62c88deaf7044ff58d01d7
-
SSDEEP
3072:WD3l+XQzPeV91310pWudJKakpNDtm2pgYMidIP1W:WD3l+XQzPe713CpWCJypxtm2pgYMidIQ
Malware Config
Extracted
gafgyt
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
04652bab6e2b0d35ace4fdaacb8e64bc.elf.elf linux ppc