Behavioral task
behavioral1
Sample
64c36b4aba0870001f82254f4e47e1c2
Resource
ubuntu1804-amd64-20231221-en
Behavioral task
behavioral2
Sample
64c36b4aba0870001f82254f4e47e1c2
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral3
Sample
64c36b4aba0870001f82254f4e47e1c2
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
64c36b4aba0870001f82254f4e47e1c2
Resource
debian9-mipsel-20231215-en
General
-
Target
64c36b4aba0870001f82254f4e47e1c2
-
Size
91KB
-
MD5
64c36b4aba0870001f82254f4e47e1c2
-
SHA1
2dc5b29f3eb0e8eb2a8e6f043156e4ec44097f7b
-
SHA256
5f76b48126032202fcb5f65a22ba65aed57a404c0aa1a0ac0f73cda3d47b566c
-
SHA512
d5eb7a121b7288af8f998019a139c7339d9539f823d59d1bc38d18ca7a08af168deb00f2f97c367188b5885e1624e13b724ecc28ba12db096e03e5a811ea210f
-
SSDEEP
1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8Kl4umXxVqDrstKfz9e:Q97vk51RcG7Aol4umXxVqDrIKfz9e
Malware Config
Extracted
gafgyt
173.212.249.232:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
64c36b4aba0870001f82254f4e47e1c2.elf linux ppc