Behavioral task
behavioral1
Sample
5ed4fe06e20a8dfd7a16e69ea509086b
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
5ed4fe06e20a8dfd7a16e69ea509086b
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
5ed4fe06e20a8dfd7a16e69ea509086b
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
5ed4fe06e20a8dfd7a16e69ea509086b
Resource
debian9-mipsel-20231215-en
General
-
Target
5ed4fe06e20a8dfd7a16e69ea509086b
-
Size
175KB
-
MD5
5ed4fe06e20a8dfd7a16e69ea509086b
-
SHA1
22d5e19336370e29b10097ac70b8111a0d118a79
-
SHA256
473c8c436ca1f0d1ed2eeb9676c4601e500701c3f43d8d4ca3708c8bc2d22cfd
-
SHA512
e4206b229b026b7fff2b8e47b4301c489a726fe49eb8c1e33813d7c2e261837495bc71c3f74a9906027418aa62c8d6ed4839b6238749aba04b06d0bfcf51de26
-
SSDEEP
3072:pfRG+TXmlVX9x/wA5gOyGYrywPvq8r64E9RsPHs0awWGetKNX:pfRTmb9NwA5gOrLwPv1osPHs0awWGetC
Malware Config
Extracted
gafgyt
103.214.111.121:5888
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5ed4fe06e20a8dfd7a16e69ea509086b.elf linux ppc