Behavioral task
behavioral1
Sample
ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf
Resource
ubuntu1804-amd64-20230712-en
Behavioral task
behavioral2
Sample
ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral3
Sample
ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf
Resource
debian9-mipsbe-20221125-en
Behavioral task
behavioral4
Sample
ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf
Resource
debian9-mipsel-en-20211208
General
-
Target
643c4c5e1f20f97ad3c0e5ea115c3182.bin
-
Size
41KB
-
MD5
a4edc1c213f07b4a171d1bad8722faf2
-
SHA1
930db24b5b720c2afb3b75fe234202e15af0094c
-
SHA256
19f024491644a9eec998d6dde84a611c245352d8038195b1e8783fc9186b4f77
-
SHA512
f18b7d4987c8bb57dae673e5186c1f50cc4f46070328a59cbe77611830913928e24b40d31fb9e11d23f5b02a9753d38aa24a7925793eec508180ed90c592b3dd
-
SSDEEP
768:RN1TZPLuppt4tGvqrMZWkz8sKhxW8zBUCqFUlE1+jCeh3oCqxV:1ThaGbM4RsKhxW8qR2xNh3nqxV
Malware Config
Extracted
gafgyt
5.181.80.141:351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf family_gafgyt -
Gafgyt family
Files
-
643c4c5e1f20f97ad3c0e5ea115c3182.bin.zip
Password: infected
-
ed1f73e96d6a6ad78949a7915e2d228237dc24ff321ead8315b7f65f5e68b09c.elf.elf linux sparc