Behavioral task
behavioral1
Sample
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf
Resource
ubuntu1804-amd64-20221125-en
Behavioral task
behavioral2
Sample
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
04652bab6e2b0d35ace4fdaacb8e64bc.bin
-
Size
45KB
-
MD5
f3d798e5535c8f1afc5b57aaadc18c79
-
SHA1
8e072dab704d04c4099bad7261860499e4629752
-
SHA256
e2619685741e73cd6f882df16ed154a85e8aa99203383414647757a4e1402cb2
-
SHA512
9ec249dda391e06768fc0228d60b710a27dc17951f1432ac7b3ea92537a902d40a2e9ae6e4082cd6c7bc0a8cb20d76fabe88067a2994c20044bd2838abe95b3d
-
SSDEEP
768:XJMeopZepvr7AztzfcOoSqgQW8jBEaAUJ3FNZfFfL2eKyiLsLYfRsr9S9iA4/+EI:JeZawztr5qnPjiknzfFfL2IgRAS0I
Malware Config
Extracted
gafgyt
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf family_gafgyt -
Gafgyt family
Files
-
04652bab6e2b0d35ace4fdaacb8e64bc.bin.zip
Password: infected
-
6a21f0dbc386c1f6300694ffdd2051e4680a52cec66e9d789445fa8a30329db1.elf.elf linux ppc