Behavioral task
behavioral1
Sample
0c79abd9ed817ae8ab09e2d623856d39
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
0c79abd9ed817ae8ab09e2d623856d39
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
0c79abd9ed817ae8ab09e2d623856d39
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
0c79abd9ed817ae8ab09e2d623856d39
Resource
debian9-mipsel-20231215-en
General
-
Target
0c79abd9ed817ae8ab09e2d623856d39
-
Size
83KB
-
MD5
0c79abd9ed817ae8ab09e2d623856d39
-
SHA1
da4fb81c9e84b9283a334f22c0cc5eacc850e97a
-
SHA256
6b870ae0c77556c2a2b5ae1b72844eb394215067fdc80b1e7a3bb6e5b9ceb33e
-
SHA512
f9aba80bb2f623fa21f621f6c1c879478f39c0ead5c11cd2734ed38a33afaf6ae4b617e6d094745a2085d3a57ede6d8316e8859fe42fc63f20daf611b448e67f
-
SSDEEP
1536:PQ40tMGKEUItUkOwVaPKoNNk66CXfSVmkO0VPXjgFf6TX:PPTdItJvQk66CaVm50VPXkFf6TX
Malware Config
Extracted
gafgyt
198.12.76.151:51351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0c79abd9ed817ae8ab09e2d623856d39.elf linux ppc