Behavioral task
behavioral1
Sample
e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
e4b1967046414a0bdd00a30a32923342.bin
-
Size
36KB
-
MD5
8e40006377f559698e7205c25826be48
-
SHA1
23b7c7b31c7c20b6c6ac8fb813bd7e69ce05b965
-
SHA256
cbd25fb4fbd75c101dbf07e11c0609f87e20f8bb0e4de47028fbdec3e56c7e6c
-
SHA512
cc0433a3c65e72b1697fc68ed9e7c8c825e443cd9aa3377d828a76b989da76eb74ed9ad51d511e5acb1fb1c37cfb8c9674c1a21aa6ec18579d4c757983c59e96
-
SSDEEP
768:7awmJi7/X3P572Zp2fXYUjDWbbDkjtUbNn+Mxuz8wHria10tEvfc:7aC7/XQr2fYBTOGBlxRwLia10tEvE
Malware Config
Extracted
gafgyt
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf family_gafgyt -
Gafgyt family
Files
-
e4b1967046414a0bdd00a30a32923342.bin.zip
Password: infected
-
e006f6af56b54cb31117020221aad78449cf1e448fd302e353d8f2c39c80a6dd.elf.elf linux ppc