Behavioral task
behavioral1
Sample
6d0601bd5cd8ded6d98c03ca3e3fed56
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
6d0601bd5cd8ded6d98c03ca3e3fed56
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
6d0601bd5cd8ded6d98c03ca3e3fed56
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
6d0601bd5cd8ded6d98c03ca3e3fed56
Resource
debian9-mipsel-20231215-en
General
-
Target
6d0601bd5cd8ded6d98c03ca3e3fed56
-
Size
160KB
-
MD5
6d0601bd5cd8ded6d98c03ca3e3fed56
-
SHA1
eb41556b141c2dff728755c321a7b54934d064d1
-
SHA256
cfe7c9590cb2c9c24d7a075b17c51759bd4a24c78d6ef5175296595f5c6d70c2
-
SHA512
b904e3b526d8ae234cefcef5ee72b0fc7c8b1a4831a9b63d0117d5a3c9e027d09040b8502cc83181b9967aefbc38b6f2cac63f115d42295332dd3f1b049d7092
-
SSDEEP
3072:XQQSjt3sffNPYfBC/n63GH+wjmqmQFcvNei2uX:gfh3WlYfOns6mqmQFcvNei2uX
Malware Config
Extracted
gafgyt
127.0.0.1:7547
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
6d0601bd5cd8ded6d98c03ca3e3fed56.elf linux sparc