Behavioral task
behavioral1
Sample
956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
53179134826959cdc93712da40f5e6c5.bin
-
Size
52KB
-
MD5
169c58794d01f362edf8fccfdceef36b
-
SHA1
60353580f9e209dbcdc26c8e8476da2734bebe51
-
SHA256
10d6d9f175e84db93f7de7c33a92dedadf23652ca50c9c8fa3ca9a4c135fbd6b
-
SHA512
71719cf7f19c145c2a22877ef9edf4d50597b029ed337c5934e72e19f25b8fba0152fe8e8650b9e475b29ed75da908721ca4ad0e0e720e7dd5c7abc59260aea0
-
SSDEEP
1536:DwSWzGgxyO0ShZwFwKQkxCFRG5+WXq2BR5H:DwSZgU4DLKQLPOqIR5H
Malware Config
Extracted
gafgyt
78.40.117.218:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf family_gafgyt -
Gafgyt family
Files
-
53179134826959cdc93712da40f5e6c5.bin.zip
Password: infected
-
956cac382801a9af28c734f1e888735fcd9f98de0ff0526c3b92356b810e297b.elf.elf linux