Behavioral task
behavioral1
Sample
34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf
Resource
ubuntu1804-amd64-20231026-en
Behavioral task
behavioral2
Sample
34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf
Resource
debian9-armhf-20231026-en
Behavioral task
behavioral3
Sample
34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf
Resource
debian9-mipsbe-20231026-en
Behavioral task
behavioral4
Sample
34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf
Resource
debian9-mipsel-20231026-en
General
-
Target
be8bc5483da0c1f246eb0e57c72d20a4.bin
-
Size
42KB
-
MD5
72c2f0d539fb0a92d56a962382a6bf05
-
SHA1
33240e6d1aec6909198b7e6c1dc4f0c69603bfc2
-
SHA256
8d3bee490d71a91b16d9fb8b821dcf9865a9bd8cdefda4207c3849736ca61ab1
-
SHA512
8996d6875353d82b24e6b7fb4efdf2e38187627e144189811498664ba100c34be50145e264161995ca79a6a10858739bd1797bc8176d24e7505507379fa53dd5
-
SSDEEP
768:7fClenJh+sdGyjfkTyF3xF5AvkPE0sLPbwCEjlyhZWcJ96xFvJA6VnSL2AN:7fiUUiGb+txfAMEjLP8zYhwXFxDxSpN
Malware Config
Extracted
gafgyt
103.29.2.134:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf family_gafgyt -
Gafgyt family
Files
-
be8bc5483da0c1f246eb0e57c72d20a4.bin.zip
Password: infected
-
34254e7c3ec86e864cfc6f88a62bb25187cddefcfaaa6079926ef374fdb74b5e.elf.elf linux sh