Behavioral task
behavioral1
Sample
18d51649e8bb998277c66a6e6c63a515
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
18d51649e8bb998277c66a6e6c63a515
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
18d51649e8bb998277c66a6e6c63a515
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
18d51649e8bb998277c66a6e6c63a515
Resource
debian9-mipsel-20231215-en
General
-
Target
18d51649e8bb998277c66a6e6c63a515
-
Size
111KB
-
MD5
18d51649e8bb998277c66a6e6c63a515
-
SHA1
b9495a285b4c3b52c1144d308437ad5dd9c8cfc8
-
SHA256
454f87a22e0a4d90048bb4e2b7edb58ab40fd2ac898d5406f766b567a614cefc
-
SHA512
5d496a56b5161811a4b0a0ed58e75b086737e56ea105e5131094ff086bd0f3f3561cb8ba5ba5db239c145e725c30779e1d8fc1252909cc843f964b079ea5e200
-
SSDEEP
3072:5JdUYpwTLOOngLmMr1r1yE3fJLJAK7WyvWUPGU:5JfpwfOOn/K1rLhLJAK7WyvWUPGU
Malware Config
Extracted
gafgyt
66.172.11.120:13031
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
18d51649e8bb998277c66a6e6c63a515.elf linux ppc