Behavioral task
behavioral1
Sample
0886e9452634e5e24d638fc40cb2b1dc
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
0886e9452634e5e24d638fc40cb2b1dc
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
0886e9452634e5e24d638fc40cb2b1dc
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
0886e9452634e5e24d638fc40cb2b1dc
Resource
debian9-mipsel-20231215-en
General
-
Target
0886e9452634e5e24d638fc40cb2b1dc
-
Size
167KB
-
MD5
0886e9452634e5e24d638fc40cb2b1dc
-
SHA1
ab08c2a2b82820a0fe1764aa332b3d0d59c041e0
-
SHA256
a401869005aaa20bf17e2dbfc018451cc5090acd4cac00f8ddb3020b65d6d436
-
SHA512
3c7f6e7b4b1f4b9bad16f223d1fea4dace371a174e14188635ad37b95be5b4c15668d648142c7c6eef6a874c23e9b24e9b74d7a9d9600b417ce7157083defbd8
-
SSDEEP
3072:FzyHAJIZxD3+A2dzOiT38RVuGJfXkBnF3PMLL2kwatkjD9m4AmrFaMnS:FzyZZx72IstRMLL/ED9m4AmrFaMnS
Malware Config
Extracted
gafgyt
127.0.0.1:80
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0886e9452634e5e24d638fc40cb2b1dc.elf linux sh