Behavioral task
behavioral1
Sample
25687c384ae4fe6c7cf23407dc7e6c03
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
25687c384ae4fe6c7cf23407dc7e6c03
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
25687c384ae4fe6c7cf23407dc7e6c03
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
25687c384ae4fe6c7cf23407dc7e6c03
Resource
debian9-mipsel-20231215-en
General
-
Target
25687c384ae4fe6c7cf23407dc7e6c03
-
Size
117KB
-
MD5
25687c384ae4fe6c7cf23407dc7e6c03
-
SHA1
2701d3dd5a8f4025fee8f3e5d773ce6e12e4b597
-
SHA256
57d208cf4feecab31210a733d2a64bee101f2d16b40f099f73e1acb8ba3ff58e
-
SHA512
8057f834f4134effaf2417a19a2a62023ea46bc0b971697d3ef69c2beb1a6238bcb57efa61c6d105b6e80bd05325825d99287e50d83ee8ef6656c49fbff94b02
-
SSDEEP
1536:/ZeD2TDvINcb5g/QAYrJnhQH94NXAE6RtTR/TQICmuwA/K7yYPN:1vIN65tnhmYRCRLTCmuwACGYPN
Malware Config
Extracted
gafgyt
185.172.110.214:888
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
25687c384ae4fe6c7cf23407dc7e6c03.elf linux sparc