Behavioral task
behavioral1
Sample
6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral3
Sample
6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf
Resource
debian9-mipsbe-20221111-en
Behavioral task
behavioral4
Sample
6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
7c6b21cb38e4c569a7882e863ffce1d8.bin
-
Size
39KB
-
MD5
cf3318151d259bc58c3dfe06858932a3
-
SHA1
b22879aef780bdb3e72674f9ef0433e5bdae6c82
-
SHA256
b27b1e9d03010396129959ebb9659241f55ae26c928099ac574ceafa1dfe50aa
-
SHA512
d26f18ab39ca3fbaac1f520f548fb2a2e6cbe4c9e378fa8a5acfe846f54ba9639a5107e3e6495446886bf3d8b3f362f074b05fc5d059ec96204bf8ef34469e92
-
SSDEEP
768:mlQfW0qzaz1EwRy0axaAcLY3m76S+Mr3spHKVzkVaamzGzWO6:mMqzmBREvcLH1jrMqVzvfiF6
Malware Config
Extracted
gafgyt
5.181.80.134:888
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf family_gafgyt -
Gafgyt family
Files
-
7c6b21cb38e4c569a7882e863ffce1d8.bin.zip
Password: infected
-
6818f7c5a8cf4d2d94a4ef24caeb0dfecbf26d061b9cab9593dc145d8df2f8bf.elf.elf linux ppc