Behavioral task
behavioral1
Sample
96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
7f79aa115cba37f63a13611442dcbdff.bin
-
Size
70KB
-
MD5
bf25f2d5c9e0a6685b146fca08140def
-
SHA1
60b1d9a093d26de796fa48f2f0bcb42afbe0127b
-
SHA256
abba5082ea9cbe0ac8ce294de70e5f00643807b65c8969043a9c881460d450dd
-
SHA512
249b07137702d77f788a3841ee2df6e5edb634bb0cfc833474e1c54e3dea259db4f4a414004498ed890c9692d16dfba7fe4f96865405d598d6ac11263370573e
-
SSDEEP
1536:MleXlI30MqpJNdIw7F92K4DUU6PinyZyDT9Nq88Kxj642MZ8VK2Chc:DMiJN7L2hUf/IDT9NVB6OOVfIc
Malware Config
Extracted
gafgyt
91.92.244.11:19302
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf family_gafgyt -
Gafgyt family
Files
-
7f79aa115cba37f63a13611442dcbdff.bin.zip
Password: infected
-
96018c58737fe9d9154a86105de5b9abce856ae5b9963948f6e4cf142f428e2c.elf.elf linux sparc