Behavioral task
behavioral1
Sample
20e9012a6dff7f23547f5ad7dfcf3c5c
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral2
Sample
20e9012a6dff7f23547f5ad7dfcf3c5c
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
20e9012a6dff7f23547f5ad7dfcf3c5c
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
20e9012a6dff7f23547f5ad7dfcf3c5c
Resource
debian9-mipsel-20231215-en
General
-
Target
20e9012a6dff7f23547f5ad7dfcf3c5c
-
Size
105KB
-
MD5
20e9012a6dff7f23547f5ad7dfcf3c5c
-
SHA1
51126f4a8193a68d34d2f9f3888f9349be1c93ba
-
SHA256
630deb3e94ccff10753a835a9f455a25721f86f5826c6d0910c8a26ad26bdb14
-
SHA512
c1e6f7a38c6d37a5442759f0fec62df35dabebadbe376c042eff71021feccfec5e1e8bf068c55e4e87b23f806d6eafa07d9da9baf62152847eeaaf6c89f12d86
-
SSDEEP
3072:VZeSr1voDZ7mkNr/4mFydPNRPbDNmFu/QUWAkwWuW:VHr4NmkNrwSydF5bhmFu/QUbkwWuW
Malware Config
Extracted
gafgyt
109.201.143.182:9175
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
20e9012a6dff7f23547f5ad7dfcf3c5c.elf linux