Behavioral task
behavioral1
Sample
0d515ab81c54e30370b47601a396c304
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
0d515ab81c54e30370b47601a396c304
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
0d515ab81c54e30370b47601a396c304
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
0d515ab81c54e30370b47601a396c304
Resource
debian9-mipsel-20231215-en
General
-
Target
0d515ab81c54e30370b47601a396c304
-
Size
134KB
-
MD5
0d515ab81c54e30370b47601a396c304
-
SHA1
af2ccf98b4978ef7a3be2b02e8aff179b450d5e0
-
SHA256
a251436703bc4b2caa13cf7c191b84b3f47673d2468b7bcaa2866b84160d0d68
-
SHA512
b0c8210895ee5bc76483cda6f2b2571c23b6c3be004c9a3c58ffe5c66e0b9a3313aaaa288c64fd0302de33f7296cdf4a4565741638d93584c6bb0ca08f33df39
-
SSDEEP
3072:+9ItpgyIDGxCQlvretJ8add9Qzhspf7lrYZ6bqKQibhgBik:+9mpgyIDGcQlTetJ8addQUZkZ6bqKQia
Malware Config
Extracted
gafgyt
89.190.159.181:1192
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0d515ab81c54e30370b47601a396c304.elf linux ppc