Behavioral task
behavioral1
Sample
5ccc6332fdaf49aeac675a01f45c3b8c
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5ccc6332fdaf49aeac675a01f45c3b8c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5ccc6332fdaf49aeac675a01f45c3b8c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5ccc6332fdaf49aeac675a01f45c3b8c
Resource
debian9-mipsel-20231215-en
General
-
Target
5ccc6332fdaf49aeac675a01f45c3b8c
-
Size
100KB
-
MD5
5ccc6332fdaf49aeac675a01f45c3b8c
-
SHA1
2e1f021995a9858536aaedfa07e93fb7639f38f3
-
SHA256
2ae045ea9d94d2c6932ce898b9ee65e042907e96c1078f61f257aa5964765a65
-
SHA512
5a643ee1749983fda20174fc5bdd3582443d132a4c15d818ecbf4683a01fc745b00ce7169c98f6672ccb4d4c159e70f2d3f66c0e7c23cf244985821d4d5585dd
-
SSDEEP
3072:3ElS5Jmg/uOFFAGgaHZUdrH5h3HVTfM3r2uRSUmVU:3EgjWOFFAsSrH5h3VTfM3r2uRSUmVU
Malware Config
Extracted
gafgyt
185.244.25.135:1201
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5ccc6332fdaf49aeac675a01f45c3b8c.elf linux sh