Behavioral task
behavioral1
Sample
64520af5d5b42d7eb4d243f04d39624e.elf
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
64520af5d5b42d7eb4d243f04d39624e.elf
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
64520af5d5b42d7eb4d243f04d39624e.elf
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
64520af5d5b42d7eb4d243f04d39624e.elf
Resource
debian9-mipsel-20231221-en
General
-
Target
64520af5d5b42d7eb4d243f04d39624e.elf
-
Size
86KB
-
MD5
64520af5d5b42d7eb4d243f04d39624e
-
SHA1
8524a618c54ba4e3c535317bb66c9a4026dedb2c
-
SHA256
4724d2e60926509e912299ea3a088c959d9a4e6d803e6a2281566e07d1b5934a
-
SHA512
56e7881ea4f01b1bca0b40fee3fd7380d488e6531bb6353380e37b74468815d9d02e233caedac26aa81cff479d7a53eccecc4a61ee7578fdf95c95aa3d26e931
-
SSDEEP
1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJCFdojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JyBQLmkxVqODofzee
Malware Config
Extracted
gafgyt
185.196.9.5:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
64520af5d5b42d7eb4d243f04d39624e.elf.elf linux sh