Behavioral task
behavioral1
Sample
49f89dcc94c0a8903c7fd2783c003d7c
Resource
ubuntu1804-amd64-20231221-en
Behavioral task
behavioral2
Sample
49f89dcc94c0a8903c7fd2783c003d7c
Resource
debian9-armhf-20231221-en
Behavioral task
behavioral3
Sample
49f89dcc94c0a8903c7fd2783c003d7c
Resource
debian9-mipsbe-20231221-en
Behavioral task
behavioral4
Sample
49f89dcc94c0a8903c7fd2783c003d7c
Resource
debian9-mipsel-20231221-en
General
-
Target
49f89dcc94c0a8903c7fd2783c003d7c
-
Size
113KB
-
MD5
49f89dcc94c0a8903c7fd2783c003d7c
-
SHA1
4df586fe5c24bc301c16f776fce0489dd7fb4424
-
SHA256
8e0c657a9c78c500fcf0b1c768bf19dfac59dec6ab9f067bc4d0e7c4d02cfb2a
-
SHA512
996c7c65f586f5af6305cf426b43fcf46fb36b4726e43e4cbf97e0fdb7b9b6caee94ad85ecde7a9ca71035980be47e93b57efee78d9ff8067ab50d28fbcbb329
-
SSDEEP
3072:FHXfEEPOH0UHNzONBbsQF5h7z7ku62QnI0PDG4gQNcR:F3LRUHNzOwQF5h7zQ2QnI0PDG4gQNcR
Malware Config
Extracted
gafgyt
195.133.40.33:42516
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
49f89dcc94c0a8903c7fd2783c003d7c.elf linux ppc