Behavioral task
behavioral1
Sample
0d0f48f7a505a422588245f36af10298
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
0d0f48f7a505a422588245f36af10298
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
0d0f48f7a505a422588245f36af10298
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
0d0f48f7a505a422588245f36af10298
Resource
debian9-mipsel-20231215-en
General
-
Target
0d0f48f7a505a422588245f36af10298
-
Size
110KB
-
MD5
0d0f48f7a505a422588245f36af10298
-
SHA1
c5808fd2ec60debd16919784f3c49e66d6c2799f
-
SHA256
9b8e29164a63e7e4c854d5d4d92250f4a73a5c050af28e2a47b0da415e3a5f1a
-
SHA512
093d6436b01038b4425a382bf92f75ce3383d193401e68504052c2b433350c9671ca414b90d7971b772937df7a9e342d0f0060778b359b2b05d1b2c9e582a53a
-
SSDEEP
1536:p3yD7fXHV48FvgQl7grZFeqDk6SgRzgmBrqoDMbLJAK7WRLjWUPGr:paz7vKlLDkez6oDiLJAK7WRvWUPGr
Malware Config
Extracted
gafgyt
104.244.76.190:671
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0d0f48f7a505a422588245f36af10298.elf linux ppc