Behavioral task
behavioral1
Sample
13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf
Resource
ubuntu1804-amd64-20231222-en
Behavioral task
behavioral2
Sample
13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf
Resource
debian9-mipsbe-20231215-en
Behavioral task
behavioral4
Sample
13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf
Resource
debian9-mipsel-20231222-en
General
-
Target
951aeea581cff410a0da531e3c209eff.bin
-
Size
41KB
-
MD5
1bc402cce381380328d029e36db917ab
-
SHA1
3a9da6267c943dbbadd7c2f5c2dbd8710aff5dd8
-
SHA256
6ec2666b923aadf6f872e1fc76ea02b9482e8c0ad2e48a1ade879e5bc599af20
-
SHA512
500382e0c1ebba54f141cbaa827ab3ec58a3bca7d175a8278f6d3c7ba7894beb53d2e3e6c32739fea4e84084758321a3ec938e8f91eb05f6104b6db612f32f44
-
SSDEEP
768:JJrCMjM3Tg0Vz/G7Kamb1+SmB71jsTseQgngBcEMAWSOjFuBUoEn8OFQsYknEZ3:3rCMYBVzO+p5+SG7hleQgrSWsSoEnXFc
Malware Config
Extracted
gafgyt
51.250.72.163:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf family_gafgyt -
Gafgyt family
Files
-
951aeea581cff410a0da531e3c209eff.bin.zip
Password: infected
-
13b62a27bbb124c94245f55bc5cdbdf4ad54bcdd77f08e883c48b4e950ae7fe6.elf.elf linux ppc