Behavioral task
behavioral1
Sample
2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral2
Sample
2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral4
Sample
2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf
Resource
debian9-mipsel-20221111-en
General
-
Target
94d99580317f2b719afd6e1d21dba624.bin
-
Size
41KB
-
MD5
5659de3b338306a02c767324534836ec
-
SHA1
71eee61b45863227161778959c0596a303262a53
-
SHA256
1ee7a6d37c9104bfc44163ed7391a8fb70d74005f1aa8ce4dc80c58baa87fc42
-
SHA512
823abdbb86f7ceadeb912a03674b892bdbec0c27e557707e5bcd29464c03752ef3dc7d54ce0f227ac83ba8719399d1192f7d23383775dfeeb5c8c096e5362c2e
-
SSDEEP
768:Xs2nejleAL+aMQfaEBvilDx0zTTjZooV1yIjrvzcKZa0OWJP/Wf:qjleI+NBD8TTjF8iP1C
Malware Config
Extracted
gafgyt
5.181.80.134:888
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf family_gafgyt -
Gafgyt family
Files
-
94d99580317f2b719afd6e1d21dba624.bin.zip
Password: infected
-
2ae6459c45def58cde36088cc319149975d3dd64f391d03d0a39eb1b2a3f8d6b.elf.elf linux sparc