Behavioral task
behavioral1
Sample
6544d6ef31e0d72c698f99c5401db1ae
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
6544d6ef31e0d72c698f99c5401db1ae
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
6544d6ef31e0d72c698f99c5401db1ae
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
6544d6ef31e0d72c698f99c5401db1ae
Resource
debian9-mipsel-20231215-en
General
-
Target
6544d6ef31e0d72c698f99c5401db1ae
-
Size
93KB
-
MD5
6544d6ef31e0d72c698f99c5401db1ae
-
SHA1
5beb3fdee545bd5d8c0b4aa4cfa90346acb502ad
-
SHA256
8e62cab721119bf102c99693ce8db2f3ecb49aa6d8f1c63e84396e34818cf237
-
SHA512
815d760dd890cbd19cdf32815e79f0e6577323b04a02b8bce0c3444428eb579692511a6579c52413ed95799d9362ffa3792423574489cae9148b4ac9bf9f38c8
-
SSDEEP
1536:Pan4eGuIuaLWYWvOg16qvXrM2dRrhHC/rj/5hNLdKtymYME0XZjZkfosz:SlxvmgvXrM+Rrs35hNLdKtymjE0XZNkb
Malware Config
Extracted
gafgyt
40.121.158.163:420
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
6544d6ef31e0d72c698f99c5401db1ae.elf linux ppc