Behavioral task
behavioral1
Sample
6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf
Resource
ubuntu1804-amd64-20231026-en
Behavioral task
behavioral2
Sample
6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf
Resource
debian9-armhf-20231026-en
Behavioral task
behavioral3
Sample
6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf
Resource
debian9-mipsbe-20231026-en
Behavioral task
behavioral4
Sample
6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf
Resource
debian9-mipsel-20231026-en
General
-
Target
e016ffa8b01c128f34e3b746034609ed.bin
-
Size
45KB
-
MD5
f28ff031769fd15d222b05864eff36df
-
SHA1
b35bdc87e28b20287a337955818a8f61365c1361
-
SHA256
3f4c532361120f657207715c8eccba6e62f4a45f22bddf2a905b920e89d0834d
-
SHA512
4a07d9856f1ecac31ff111148509aaa510bd6ff5edf60aa73f7a2479ad911d268b5b7534c091cf226a6b60d53046dc1d44a3b48ba7a6001ad2758b7151085a74
-
SSDEEP
768:pxuPt0I5WjaXupUjhuy3jNW3IkmUULcTjlX7Pz0tDUHjpNmxZVEPGwuK9pA8:pxulF5Wjqupkhb3j+pmNmjpn0ujpNgm9
Malware Config
Extracted
gafgyt
178.218.146.89:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf family_gafgyt -
Gafgyt family
Files
-
e016ffa8b01c128f34e3b746034609ed.bin.zip
Password: infected
-
6be1d8f00f9c1b386f12b08e13d32dee1f8d1b1df23f41304645fe5bfd128d64.elf.elf linux sh