Behavioral task
behavioral1
Sample
8fcf3ba7b4164f4119ef99bd5cd6e07e
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
8fcf3ba7b4164f4119ef99bd5cd6e07e
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
8fcf3ba7b4164f4119ef99bd5cd6e07e
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
8fcf3ba7b4164f4119ef99bd5cd6e07e
Resource
debian9-mipsel-20231215-en
General
-
Target
8fcf3ba7b4164f4119ef99bd5cd6e07e
-
Size
185KB
-
MD5
8fcf3ba7b4164f4119ef99bd5cd6e07e
-
SHA1
ba5d50e0d3f97d59a3c884571c99f959bbccd626
-
SHA256
717645e39dc653d094d52bc0a3046fa0148e07df0772b2ce23c28fc001fab545
-
SHA512
967ede4766113e7e9586cf7a79e3b7f596d24d371b94daf40dcab4721f3aa6c72be3c67eec3c026910ccc9d23be593f2f838aba48e1b377b65f8f9ff647975c1
-
SSDEEP
3072:Uh6YcOXXyPXVoOXz8Oo5YGH229Frz5p8esPHs0aozetKNX:UhLaVlXz8OelHJ9/VsPHs0aozetKNX
Malware Config
Extracted
gafgyt
46.17.40.224:139
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
8fcf3ba7b4164f4119ef99bd5cd6e07e.elf linux ppc