Behavioral task
behavioral1
Sample
f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
4b71f8348aee200456cc603410e923ba.bin
-
Size
41KB
-
MD5
fced23d8b03bd5ed1bc5248f42a5ea1f
-
SHA1
a23e295fab0da3566ebe51b49212595690dbee01
-
SHA256
0d30a6d47d995dab1166215be8b95e8e17dce70c6095621402c89df02eb12cae
-
SHA512
109b7c332bd47980ec4195351f553c0eb725afa2fcbbfeb87648b753079eae9ec6153f727f24c816ebc6e5f6ca0aadda79b7bd273ce171430da03d382303ea53
-
SSDEEP
768:U0463iD0bCI80hnAwk2lo9Su35Q+ODAEKC8KEFfvcJ9j12aFGSIvqh:U0l3SVIpp79lk35Q+xEVNE1vcJX2u3r
Malware Config
Extracted
gafgyt
193.233.252.242:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf family_gafgyt -
Gafgyt family
Files
-
4b71f8348aee200456cc603410e923ba.bin.zip
Password: infected
-
f0e125bae3cdc55e46f5120985abb690336dad070451dc284e208ce85e92ad6e.elf.elf linux sparc