Behavioral task
behavioral1
Sample
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf
Resource
ubuntu1804-amd64-20231026-en
Behavioral task
behavioral2
Sample
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf
Resource
debian9-armhf-20231026-en
Behavioral task
behavioral3
Sample
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf
Resource
debian9-mipsbe-20231026-en
Behavioral task
behavioral4
Sample
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf
Resource
debian9-mipsel-20231026-en
General
-
Target
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.zip
-
Size
39KB
-
MD5
59461c44638a733c89fcd5429bd090a6
-
SHA1
a6ddbeceae18d53a60dc7904f954692ce7b917b1
-
SHA256
7036968f811955ddb7f18e104fb064ca5911413ad91c94f3ef6980d69b672dec
-
SHA512
7fbdb5dcec9ce2cab62b65155403e609961deaa108fad942bb25f69bfdb6b26ac6892a09434e0e67ea1d41cc6c59f38ba9acb569d50c4dad398f3fb778d23084
-
SSDEEP
768:PSeUOj0Mm7jFoGREwuJDTT5FqHHG8h2Og+mmjYIqJNEvakNqjZwQ/na13tQGf4kf:PSPDMaFoGWwUTT3qGw3OqysqM17QHW
Malware Config
Extracted
gafgyt
188.166.67.116:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf family_gafgyt -
Gafgyt family
Files
-
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.zip.zip
Password: infected
-
98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f.elf.elf linux ppc