Behavioral task
behavioral1
Sample
309aeeb5c0d741e9e5671c78edfc61d1
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
309aeeb5c0d741e9e5671c78edfc61d1
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
309aeeb5c0d741e9e5671c78edfc61d1
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
309aeeb5c0d741e9e5671c78edfc61d1
Resource
debian9-mipsel-20231215-en
General
-
Target
309aeeb5c0d741e9e5671c78edfc61d1
-
Size
146KB
-
MD5
309aeeb5c0d741e9e5671c78edfc61d1
-
SHA1
3e09d585d57fd3bb24f1280a5a3013b480e08429
-
SHA256
2236b75e580af6ae61b44b174ef1c18a8aafbb58695ad52e38c8922736230104
-
SHA512
6814ad7cb16dd93a8b9213de4b04031271b0717aadd6c6e8dd47b9f618660894525a9b570b59cfd2e756633c6be00bbc173fec5972046cb07b38bd1fe500beb0
-
SSDEEP
3072:761eoCdd0MvnzX9ivetJ8add9Qzhs6pZ6bUKQiVhgBJk:761ZCd+MvEetJ8addQ3pZ6bUKQiVhgBe
Malware Config
Extracted
gafgyt
46.29.167.240:415
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
309aeeb5c0d741e9e5671c78edfc61d1.elf linux ppc