Behavioral task
behavioral1
Sample
df40805750f44ee6ff4954bd349ffde0.elf
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral2
Sample
df40805750f44ee6ff4954bd349ffde0.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
df40805750f44ee6ff4954bd349ffde0.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
df40805750f44ee6ff4954bd349ffde0.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
df40805750f44ee6ff4954bd349ffde0.elf
-
Size
90KB
-
MD5
df40805750f44ee6ff4954bd349ffde0
-
SHA1
fc23aa133223635d6489c4c60aa58c6952dafa77
-
SHA256
3c9519ae0c1b184037a4c4a036e093b0ec9346b3f1a6a89d911bce575dbf8330
-
SHA512
11207394dad4adcfae1e9ef6f1409981dc5f14118982acebfa4b64db052b846dcb79de78d90d05b20670752f9e6008369b7900851969d0333290a7a0c6d139eb
-
SSDEEP
1536:T3oCu/OcwUBvPsTbwHH3P6zMSIHsiO6aRv/lz5s5hLg6wOFO6V6qDjjofSee:T43/qUBvPs6X03IHsi2/Q5hL7wOFO6Vt
Malware Config
Extracted
gafgyt
81.161.229.147:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
df40805750f44ee6ff4954bd349ffde0.elf.elf linux ppc