Behavioral task
behavioral1
Sample
a611a12f434e52717d6ff7d48497b14a
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
a611a12f434e52717d6ff7d48497b14a
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
a611a12f434e52717d6ff7d48497b14a
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
a611a12f434e52717d6ff7d48497b14a
Resource
debian9-mipsel-20231215-en
General
-
Target
a611a12f434e52717d6ff7d48497b14a
-
Size
185KB
-
MD5
a611a12f434e52717d6ff7d48497b14a
-
SHA1
efdcf9a92009722b03ce8bb2c77ddaf72bdd42e0
-
SHA256
9558024753d2f1a25aaecfcaf6791f6f2267beb235c7ff7831b3ecf34456fc4b
-
SHA512
b01b2846ba066f2be973bc02d29dbd04901eb82f1ec60974bf9a0bba8f1cbcbdf0cf977354f4019cab98b49429dc950c9f8b10aa725e1d30c1cc71175081e783
-
SSDEEP
3072:ZpvLHOXT5PXQqHaU29OcfY/PN29FrOdgZc7sPHs0aozetKNX:ZpihQq6U29OAMPE9ggcsPHs0aozetKNX
Malware Config
Extracted
gafgyt
54.38.213.78:231
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
a611a12f434e52717d6ff7d48497b14a.elf linux ppc