Behavioral task
behavioral1
Sample
5001356c2d0b2385f013e2fafcba83f8
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5001356c2d0b2385f013e2fafcba83f8
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5001356c2d0b2385f013e2fafcba83f8
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5001356c2d0b2385f013e2fafcba83f8
Resource
debian9-mipsel-20231215-en
General
-
Target
5001356c2d0b2385f013e2fafcba83f8
-
Size
93KB
-
MD5
5001356c2d0b2385f013e2fafcba83f8
-
SHA1
a89e372dde5b9cf24a2379c009c1c9c685924413
-
SHA256
bf2040dbe3b5795c84819d7a71277cc3b60b4c41866a8d3439b97bf1a97b9261
-
SHA512
0e37f75f226b8ef9ded0598f392bb177faced13596a46562b84097ae7cccc23ed37638a79c37010dfee0df1644c1979bbbd1947b525ef4a567c86bf0c8f43068
-
SSDEEP
1536:Zq70v0GrXk8TY5vhylKTn9W+JF9iAIHmAwmCq60MS8+hFnLtm/YnA2ASjPOW:UQdXv8ZhysTA+F98wmXPFLo/Yn7ASjP1
Malware Config
Extracted
gafgyt
185.22.154.112:925
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5001356c2d0b2385f013e2fafcba83f8.elf linux sh