Behavioral task
behavioral1
Sample
54e9e65b9e3169f8d7a0a51f43c02792
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
54e9e65b9e3169f8d7a0a51f43c02792
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
54e9e65b9e3169f8d7a0a51f43c02792
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
54e9e65b9e3169f8d7a0a51f43c02792
Resource
debian9-mipsel-20231215-en
General
-
Target
54e9e65b9e3169f8d7a0a51f43c02792
-
Size
144KB
-
MD5
54e9e65b9e3169f8d7a0a51f43c02792
-
SHA1
8182b72c73183ae113d3b22988d6da1090d6122e
-
SHA256
4f6147dcd3cc297b94106f3f255108765764d9094fc0a812939b671a59838dfb
-
SHA512
392d5bbf8d25a1225e8f0de1966b937896b30c5238851b8cf2adeb20423c4b29f3f14b1148ebd823f88091140215161ba108445ee38ff93b7ca6ec6ec9f81963
-
SSDEEP
3072:usrTP1v+3P0T5RzOiT38RVuGI5XdMjlDXQ4lUgfmsEcu7NqnJ0Q:usrzQ/yF3KjlUgfmsEcu7NqnJ0Q
Malware Config
Extracted
gafgyt
192.168.0.14:80
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
54e9e65b9e3169f8d7a0a51f43c02792.elf linux sh