Behavioral task
behavioral1
Sample
495fd13fcc1dddccb6fee95ac6f93da5.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
495fd13fcc1dddccb6fee95ac6f93da5.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
495fd13fcc1dddccb6fee95ac6f93da5.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
495fd13fcc1dddccb6fee95ac6f93da5.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
495fd13fcc1dddccb6fee95ac6f93da5.elf
-
Size
142KB
-
MD5
495fd13fcc1dddccb6fee95ac6f93da5
-
SHA1
29a8cf2d49442a6ec90ba07dc1c7486eaf8636f8
-
SHA256
66c218a2ea070881510f944bc75bf6064d2b9f123676c04badbf3381771e9a66
-
SHA512
8ac2f8b9b25c6ee4003010d1b98b1f40d25e8b47fb4b214af25e4fdecde287dde5742d843fd6a99a6f8a9cbfe399bf39842ceccf7fd636c542bbfec13b6ed635
-
SSDEEP
3072:ZdERRRRbKzYgpntyJd5h9iHKcDmzj0qDPAGyoze:ZdKRR4YGntud5h9QDmzj0qDPAGyoze
Malware Config
Extracted
gafgyt
78.40.117.218:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
495fd13fcc1dddccb6fee95ac6f93da5.elf.elf linux ppc