Behavioral task
behavioral1
Sample
0f870c95fc9a15fc952fb204712d57d5
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
0f870c95fc9a15fc952fb204712d57d5
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
0f870c95fc9a15fc952fb204712d57d5
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
0f870c95fc9a15fc952fb204712d57d5
Resource
debian9-mipsel-20231215-en
General
-
Target
0f870c95fc9a15fc952fb204712d57d5
-
Size
82KB
-
MD5
0f870c95fc9a15fc952fb204712d57d5
-
SHA1
f85e263a60a47ed9c8eb9d7b8f026135f86649c3
-
SHA256
23a93034d40a3b2a08e281c0fd0ebec19e065ed9639d63feb3f6001ef309edd7
-
SHA512
9ab0a215604b17a8c1908ef4b85a8fc5fca721514b9672384508d330825503bbacb61e270f84757bcbd168a4ec383dbc6748399b787af9be7f01cb59b76b0a92
-
SSDEEP
1536:RQmUos8bkr3yv9GcY43XFKkRVCu7e2s6EmQ9VqXjtWf2Xe:RtO3CEcY43XBH62s6EmQ9VqXBWf2Xe
Malware Config
Extracted
gafgyt
185.101.105.185:4849
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0f870c95fc9a15fc952fb204712d57d5.elf linux ppc