Behavioral task
behavioral1
Sample
230b0d536e9ba8acf19953c271a6b0f2
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
230b0d536e9ba8acf19953c271a6b0f2
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
230b0d536e9ba8acf19953c271a6b0f2
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
230b0d536e9ba8acf19953c271a6b0f2
Resource
debian9-mipsel-20231215-en
General
-
Target
230b0d536e9ba8acf19953c271a6b0f2
-
Size
158KB
-
MD5
230b0d536e9ba8acf19953c271a6b0f2
-
SHA1
f4b009886ad935640106ea2eb032770c83d013b2
-
SHA256
a1eb7a1abd246754740139ee048f6899ca6b704ac41f1a21e131998dd7264dc7
-
SHA512
0fac4e350b9a26449b583a7ca5a2a9ba66441cbb3b112e65f496f71a3ae0fc5e0586f95de8a780623373e2f7e4ccafc8f3125d424a8245d4b8a74683bf3797bc
-
SSDEEP
3072:7TcmRRpaBoPkSsq/utJ8adPF4KQThssJzN07bUSQ07GngfCk:7ImR+4jVutJ8adPF4fHJzN07bUSQ0KnM
Malware Config
Extracted
gafgyt
174.138.53.91:252
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
230b0d536e9ba8acf19953c271a6b0f2.elf linux sparc