Behavioral task
behavioral1
Sample
3902f52a19a0f4372e8e9d5086ed0b24
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
3902f52a19a0f4372e8e9d5086ed0b24
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
3902f52a19a0f4372e8e9d5086ed0b24
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
3902f52a19a0f4372e8e9d5086ed0b24
Resource
debian9-mipsel-20231215-en
General
-
Target
3902f52a19a0f4372e8e9d5086ed0b24
-
Size
142KB
-
MD5
3902f52a19a0f4372e8e9d5086ed0b24
-
SHA1
efd86fc9081f7f024cf4d2c4b99bc6791b691cc9
-
SHA256
7add3aa8bff331ee3faf0bfcbf949a2435e8f3e33b98c0ddb2cc8d81dcab0be2
-
SHA512
3ce6a3ef06b1a4bfa41d64a720e2bcdb620c6bdba38219905c8b5bbb5d2b98a4b40deceb3eeee7564f1d14a8748c6c0abdd1244457540a575338c1f5c53eee38
-
SSDEEP
3072:UhgcgZNPSgbcPF8KQTVDqbsx07bqEG0Iegl3a:U2lzcPF8fVDj07bqEG0Iegl3a
Malware Config
Extracted
gafgyt
142.93.178.226:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
3902f52a19a0f4372e8e9d5086ed0b24.elf linux sparc