Behavioral task
behavioral1
Sample
5dc0c6a53dee3e2d53192c4a44ecbd7c
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5dc0c6a53dee3e2d53192c4a44ecbd7c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5dc0c6a53dee3e2d53192c4a44ecbd7c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5dc0c6a53dee3e2d53192c4a44ecbd7c
Resource
debian9-mipsel-20231215-en
General
-
Target
5dc0c6a53dee3e2d53192c4a44ecbd7c
-
Size
146KB
-
MD5
5dc0c6a53dee3e2d53192c4a44ecbd7c
-
SHA1
c19002b09c9a3e98afc7108a50f844574942f4ce
-
SHA256
bce2d024205b540cfad392ddda8fa4b26034e48251320c0ac9c549ab6f772bad
-
SHA512
dfcaa3b44bc0021d09f673e07cc3dcbb94075a2280516788b18dc46c34ec7a250858d36b5d002f203231f2cb7ee72569f2c2edeebfb1ed4f59e1b0a462b9531c
-
SSDEEP
3072:n61KUzlZ8MHnz3+ivetJ8add9QzhsdUTWDZ6bUKQiVhgBJk:n61BzlSMHretJ8addQEUTWDZ6bUKQiVP
Malware Config
Extracted
gafgyt
185.244.25.248:252
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5dc0c6a53dee3e2d53192c4a44ecbd7c.elf linux ppc