Behavioral task
behavioral1
Sample
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf
-
Size
141KB
-
MD5
2cd6de16aa049bfd0a880d6a3f8dcc9c
-
SHA1
8baddb55cfa204e169c1916cf8cd1e9cba494f86
-
SHA256
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905
-
SHA512
10f454ccfc8590e45cd94f0d3e0c88171ad69648ef6dfb1b9055bf33bebf8fa2305d46fb741fb95b0dbf97b6ec57caeb683d23a0e2dd758ecacd3ca2f0a9b844
-
SSDEEP
3072:LBT+pGTgvXDvXkDp4mjCKCBG5hAoYon+mAK0qQ6MyoQ6:1T+sTgfDfU4ISBG5hARW+mAK0qQ6MyoT
Malware Config
Extracted
gafgyt
78.40.117.218:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
1f0e671f611a477b0692be58467205c9ba6f5fc4fbd14d88213c9528a99c6905.elf.elf linux sh