Behavioral task
behavioral1
Sample
290cffccb59ec5b7af2d8eec277f1e1a
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
290cffccb59ec5b7af2d8eec277f1e1a
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
290cffccb59ec5b7af2d8eec277f1e1a
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
290cffccb59ec5b7af2d8eec277f1e1a
Resource
debian9-mipsel-20231215-en
General
-
Target
290cffccb59ec5b7af2d8eec277f1e1a
-
Size
185KB
-
MD5
290cffccb59ec5b7af2d8eec277f1e1a
-
SHA1
cd30fb5751182c4f9dd8c7b0eacc60035eaa2523
-
SHA256
a94931a63b5c84bafb57134102cb3a994d0113e88c4cf8680409e870e3ae76b6
-
SHA512
253ce307c3686553b31f56794684f730d3d10e1188b7f7f25c2f33f84bd76d0378d854436e6d67153fc816a3a0138be7260b85846860066d6abf4d8d217d8058
-
SSDEEP
3072:3DRHwyvzT+RGGcV8zXYXKX1QIY2N+3ZBw27grVz29FrCMX8K8sPHs0aozetKNX:3DlPiD17Y2N+3Z+27GVS9l+sPHs0aozF
Malware Config
Extracted
gafgyt
176.223.132.161:812
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
290cffccb59ec5b7af2d8eec277f1e1a.elf linux ppc