Behavioral task
behavioral1
Sample
236a8d63f4fa4faeacc64a28561443e8
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
236a8d63f4fa4faeacc64a28561443e8
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
236a8d63f4fa4faeacc64a28561443e8
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
236a8d63f4fa4faeacc64a28561443e8
Resource
debian9-mipsel-20231215-en
General
-
Target
236a8d63f4fa4faeacc64a28561443e8
-
Size
91KB
-
MD5
236a8d63f4fa4faeacc64a28561443e8
-
SHA1
bc4c61f3bebba83f9b881c1e88d4857efbcb3785
-
SHA256
05579733cef8a0bc45ae27066beeb6531f310c3116e065db3376dc04a9aea88f
-
SHA512
9b3b19cdef72629a238ff4b74ec72637d54deeadee7d4a301c87030f37383023fad73201a431dd70b08d19f30e76e1922879c6743a95c21ed0bd030dd703e042
-
SSDEEP
1536:Ho8UECf9XAI/rrejr4l974yVoCEh0aDPFq3rcdgJLBOnjSlQ0a0yDGP8ojBcm:IXTflVaY974yKPLPFSuPjSlQ0a0yDGU0
Malware Config
Extracted
gafgyt
194.147.35.56:29
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
236a8d63f4fa4faeacc64a28561443e8.elf linux ppc