Behavioral task
behavioral1
Sample
79bfa2944b79a21ff6f40b6f4af6ca69
Resource
ubuntu1804-amd64-20231221-en
Behavioral task
behavioral2
Sample
79bfa2944b79a21ff6f40b6f4af6ca69
Resource
debian9-armhf-20231222-en
Behavioral task
behavioral3
Sample
79bfa2944b79a21ff6f40b6f4af6ca69
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
79bfa2944b79a21ff6f40b6f4af6ca69
Resource
debian9-mipsel-20231215-en
General
-
Target
79bfa2944b79a21ff6f40b6f4af6ca69
-
Size
91KB
-
MD5
79bfa2944b79a21ff6f40b6f4af6ca69
-
SHA1
b5d9d63b55671b0dee561eeaf2b04648dd5eeede
-
SHA256
b67482e1a54a207b279c7f26fd9c6bccdc80b5ddded213bbcaacee78ad521c0e
-
SHA512
6427390ed33d1273392db8db05d9595f5272a81df0f6795bc54b4ad6701ece11e8219cab28a42d0d3c8b7e6f2a16801c0d26fe420ac5d302f19686d11c08f2da
-
SSDEEP
1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8kl4umXxVqDrstKfz9e:Q97vk51RcG7Ail4umXxVqDrIKfz9e
Malware Config
Extracted
gafgyt
203.159.80.150:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
79bfa2944b79a21ff6f40b6f4af6ca69.elf linux ppc