Behavioral task
behavioral1
Sample
a56a2605e8063e1ecb46094c9d13735c.elf
Resource
ubuntu1804-amd64-20231215-en
Behavioral task
behavioral2
Sample
a56a2605e8063e1ecb46094c9d13735c.elf
Resource
debian9-armhf-20231215-en
Behavioral task
behavioral3
Sample
a56a2605e8063e1ecb46094c9d13735c.elf
Resource
debian9-mipsbe-20231221-en
Behavioral task
behavioral4
Sample
a56a2605e8063e1ecb46094c9d13735c.elf
Resource
debian9-mipsel-20231215-en
General
-
Target
a56a2605e8063e1ecb46094c9d13735c.elf
-
Size
82KB
-
MD5
a56a2605e8063e1ecb46094c9d13735c
-
SHA1
16bd8648284f44db508424a3fb1fcc91fe220ca4
-
SHA256
fcbe8bf7a818c635c182e6224fb65c066c47fa20e079789a755d9abf3f576c35
-
SHA512
2de3df7429026050fa750f21ae8e19f471f0521644af64689c2e22056fd7e43846893f6b5bb1248ba9cd75e3ae8bef0a6b69bdb8d16619727af7f40d9197e77e
-
SSDEEP
1536:+QnsXJSXV+N8ac1xeTvb+YHP6w7Wzg/mXyVq2svMcQsj:+IgSXLac1g3J7Wzg/mXyVq2YMcQsj
Malware Config
Extracted
gafgyt
37.44.238.66:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
a56a2605e8063e1ecb46094c9d13735c.elf.elf linux ppc