Behavioral task
behavioral1
Sample
a5af40c57feee37d9db70e80e83bd13c
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
a5af40c57feee37d9db70e80e83bd13c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
a5af40c57feee37d9db70e80e83bd13c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
a5af40c57feee37d9db70e80e83bd13c
Resource
debian9-mipsel-20231215-en
General
-
Target
a5af40c57feee37d9db70e80e83bd13c
-
Size
110KB
-
MD5
a5af40c57feee37d9db70e80e83bd13c
-
SHA1
fc73a82f824e600e5663308fdb431ebd5bed311d
-
SHA256
c12396ab19458d2f8f4b717624cbec40e5610c1e98a75fb1ba8cf567a6ef6861
-
SHA512
622aa8fb2e2f870ad09b1c4acaa77ffae67d0baef1dc19eca8a89c2d88cbf8b4441684109a73d0a93fe9bdabf2d830b3dbccd3bf2d66b7fb0898a79884686db8
-
SSDEEP
1536:xb3nbUau4LGS0cbJJaa3HchRyknwd1H4XgPEK5hlzTALLJ+K7uTPjWUKGM:lXdJZ7wRykn9XW5hlWLJ+K7uTLWUKGM
Malware Config
Extracted
gafgyt
167.99.226.22:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
a5af40c57feee37d9db70e80e83bd13c.elf linux ppc