Behavioral task
behavioral1
Sample
5b5f86ec67d504157832c4172c79d40c
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5b5f86ec67d504157832c4172c79d40c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5b5f86ec67d504157832c4172c79d40c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5b5f86ec67d504157832c4172c79d40c
Resource
debian9-mipsel-20231215-en
General
-
Target
5b5f86ec67d504157832c4172c79d40c
-
Size
135KB
-
MD5
5b5f86ec67d504157832c4172c79d40c
-
SHA1
32d40c1e027a6aed9a303f44a02b4645ff212a14
-
SHA256
55017b3f4965c97c5f3684fc5b36588245a90db29178ef269fcc0ce8c95e8ed5
-
SHA512
9650a616957f6c641cd07d44c8872c15f4c37b38ffadb57274d0c8203df846f8c87024986eb78fb0ec7d886ef0401349365011d9a17b2e3c57f5bad131452f78
-
SSDEEP
3072:bkJjt+2jDKs+w4UFjDxkSJS3H4pIB2I6AWtJpchcsaa:b4J3jpDx5JS34vI6AWtJpchcsaa
Malware Config
Extracted
gafgyt
107.172.153.90:1337
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5b5f86ec67d504157832c4172c79d40c.elf linux ppc