Behavioral task
behavioral1
Sample
2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf
Resource
ubuntu1804-amd64-20231221-en
Behavioral task
behavioral2
Sample
2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf
Resource
debian9-mipsbe-20231221-en
Behavioral task
behavioral4
Sample
2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf
Resource
debian9-mipsel-20231222-en
General
-
Target
25c299bcc2a8c4baa871644dde623c27.bin
-
Size
45KB
-
MD5
ab28e088d0c766d0bf974c3333b6e15f
-
SHA1
bf5b8afb9387efb48b7a84b3de3dff1b272f46e7
-
SHA256
a0df9b8c1b14f69ea3582e92e283d2cb708ab3d8f66d42b82129eed1fee27407
-
SHA512
67031eff85aaa2e40065bfd1d8fa08f37b76421c4ce95e72d6008304b27fc38b9e6a53c4489988f4ecec491fa753decacf60b575dc3d03a75bfc13aa1942e2c6
-
SSDEEP
768:umJew1E5c3aCeiGwAqDnxJf3Cc0mp9qedNjzmZXgZxobIUKlkcicVoZ2047bYjbU:umJeOx3veiwkjKMp9/dNvmx+wILlkxyl
Malware Config
Extracted
gafgyt
51.250.72.163:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf family_gafgyt -
Gafgyt family
Files
-
25c299bcc2a8c4baa871644dde623c27.bin.zip
Password: infected
-
2267a1f8768e33f6ac07d1ef7dcb2e74a7158cf49c34d2d85d171c9948ab6cfb.elf.elf linux sh