Behavioral task
behavioral1
Sample
5f7a48b17e89be69d630dc530589da3c
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5f7a48b17e89be69d630dc530589da3c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5f7a48b17e89be69d630dc530589da3c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5f7a48b17e89be69d630dc530589da3c
Resource
debian9-mipsel-20231215-en
General
-
Target
5f7a48b17e89be69d630dc530589da3c
-
Size
148KB
-
MD5
5f7a48b17e89be69d630dc530589da3c
-
SHA1
0e8a5d25c1cbfbf30b501b0f45a439df51700b49
-
SHA256
b7484276368e4f879c0b20d4335b89bc63a2a772a0a46e5bb05f0cc4b6af7547
-
SHA512
ed7effc7a7dab8c84272474990a7d5e8dac7acefccb0aed21a3e60c97bada5098c7832284117c971255b3723ebf0d7a2765da11fa3fb2f06fd2738acdca7dbc1
-
SSDEEP
3072:XTV0CmyjdNUMuoPCC+butJ8adPF4KQThsAW07bzSQ0VGngsBk:zDjds4MbutJ8adPF4fNW07bzSQ0gngs2
Malware Config
Extracted
gafgyt
151.236.38.234:745
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5f7a48b17e89be69d630dc530589da3c.elf linux sparc