Behavioral task
behavioral1
Sample
304cf169e09c807625c6b1d75dbd5367
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
304cf169e09c807625c6b1d75dbd5367
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
304cf169e09c807625c6b1d75dbd5367
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
304cf169e09c807625c6b1d75dbd5367
Resource
debian9-mipsel-20231215-en
General
-
Target
304cf169e09c807625c6b1d75dbd5367
-
Size
87KB
-
MD5
304cf169e09c807625c6b1d75dbd5367
-
SHA1
520d0539280d3154c59b53ee393c345f748d683e
-
SHA256
a066a081e27ee9e64fedf313d972626ee325af81d5fd4d20dab96f023d7ae09b
-
SHA512
46dd6c4eace5e6bc7715c817d93c3179d67d2b7eae9a6f0f4ba9c7a08d2e87304aeac4cdbc95a589fd2f48479aa8c385ffc1ba1875903606a7cc0f5d9d476d7f
-
SSDEEP
1536:eQ5W/jByYaJYfxIxR5KFOEXwsaNAmITGtjS0CPeVmkn3hxWMFBfVl+:eMWNIsxIxR5G5guMS8Vm23hxWKBfVl+
Malware Config
Extracted
gafgyt
142.11.212.47:808
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
304cf169e09c807625c6b1d75dbd5367.elf linux ppc