Behavioral task
behavioral1
Sample
4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
38d1ca637046ea9c2b037a612ca27265.bin
-
Size
47KB
-
MD5
9d397f73d772043981a3ba41127cc5e0
-
SHA1
a42462124d56e6d98d2cb69fc8c9abbb45f548f1
-
SHA256
b2d27b00237635e59ffb1f513803ce3ed0f2b28a81ead2086fefcbe1c6b46fbd
-
SHA512
086ab840f2479f6fa29dba9a770ed6daa978f64a8dcc065730a512377b3c004e4b49cf85da3a568fbfac4d93f6515b0eac8ff74ad806590cf623b275d9abfa8b
-
SSDEEP
768:VRRIF4/ihXTMH5JDfgYyB+5ZzRxdHN6LkoffOG1ICsrhHHbMjBP:V4FjMH5Jjzn5ZFHNUkofziCsrlHbQBP
Malware Config
Extracted
gafgyt
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf family_gafgyt -
Gafgyt family
Files
-
38d1ca637046ea9c2b037a612ca27265.bin.zip
Password: infected
-
4ea3e862a706bd17b47f6d7bf7d58297308ca69399822d4f80bf329e1307c3e2.elf.elf linux sparc