Behavioral task
behavioral1
Sample
fcdef486fa04811f77d9b39d74e61b16
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
fcdef486fa04811f77d9b39d74e61b16
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
fcdef486fa04811f77d9b39d74e61b16
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
fcdef486fa04811f77d9b39d74e61b16
Resource
debian9-mipsel-20231215-en
General
-
Target
fcdef486fa04811f77d9b39d74e61b16
-
Size
117KB
-
MD5
fcdef486fa04811f77d9b39d74e61b16
-
SHA1
2265035b4425f4c95612908b564c86e67aa83580
-
SHA256
1836d930d1691b08690d9daa6634052d598330efb32b9ce42bb0233017ce6b07
-
SHA512
8733b5f1fe15be7bb260eac5164454f401a091707c3578d9e1f57aa805289fd55e1312d57b83f52b7218540442e2966f75e22a7227ebfb4d59081ef1f14f058a
-
SSDEEP
1536:/ZeD2TDvINcb5g/QAYrJnhQH94NXAE6RtgR/TQICmuwA/K7yYPN:1vIN65tnhmYRVRLTCmuwACGYPN
Malware Config
Extracted
gafgyt
185.232.64.168:888
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
fcdef486fa04811f77d9b39d74e61b16.elf linux sparc