Behavioral task
behavioral1
Sample
5b667d5f9c169fd255f6b0d63c8fc200
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5b667d5f9c169fd255f6b0d63c8fc200
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5b667d5f9c169fd255f6b0d63c8fc200
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5b667d5f9c169fd255f6b0d63c8fc200
Resource
debian9-mipsel-20231215-en
General
-
Target
5b667d5f9c169fd255f6b0d63c8fc200
-
Size
83KB
-
MD5
5b667d5f9c169fd255f6b0d63c8fc200
-
SHA1
b0a13e8cfbf101bcf901afc217e5bd2c596c74dc
-
SHA256
fe8b59ed40a9cbf7de5e2804e95fcd4a745fd923f90723ca5fb8f932f477db9f
-
SHA512
09bbd1c0aac255aba4d9a4e0d21f64e2a08eaa806d66cdebd39b0ce6ff675a271577e69866cce3a1b785b1810579af87d225c163a36747093d74a0531176baa9
-
SSDEEP
1536:PQ40tMGKEUItUkOwVaPKoNzk66CXfSVmkO0VPXjgFf6TX:PPTdItJvOk66CaVm50VPXkFf6TX
Malware Config
Extracted
gafgyt
192.3.131.23:51351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5b667d5f9c169fd255f6b0d63c8fc200.elf linux ppc