Behavioral task
behavioral1
Sample
79c39a38467394651a0f78d2e7c97ffb
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
79c39a38467394651a0f78d2e7c97ffb
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
79c39a38467394651a0f78d2e7c97ffb
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
79c39a38467394651a0f78d2e7c97ffb
Resource
debian9-mipsel-20231215-en
General
-
Target
79c39a38467394651a0f78d2e7c97ffb
-
Size
89KB
-
MD5
79c39a38467394651a0f78d2e7c97ffb
-
SHA1
efa700195711164ef72ed77ed332cac107828b00
-
SHA256
f79a0b3f95eeff73e9a836121d33fb9595b3401e389926ba961375f276f6e89d
-
SHA512
b37b9b0831ea4f9a93ab9f4cf2d8a0b98e0f5d684c31a5f8a5953c4636400ad57e68d7b48c3181f36ed0aa6727b55acfc333849d30ffa9ff733056bfd4431548
-
SSDEEP
1536:/W/OrdgsETnWGDvD8GAJyy+8ytrq1DL9OK7rVJbFuzbOBrQmzVO0VPXjDTf6vX:/06gs3G7eyy+8ytrqNL9nFuzYsmE0VPk
Malware Config
Extracted
gafgyt
192.119.66.148:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
79c39a38467394651a0f78d2e7c97ffb.elf linux