Behavioral task
behavioral1
Sample
6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
1c65981ad058f1f5b3c73156b019e106.bin
-
Size
39KB
-
MD5
420e28f9d806067561f8a200ab7df045
-
SHA1
b9396a926c80574c30182383eb56e728ca9a8f12
-
SHA256
6873638760db6815330d9d6f190f4a70250feed78a45f0e564e687e9f5d61743
-
SHA512
08dc61ceb241f6d868b172e06bbcd86db0d61adacf7c747b04fc32cea861fa5d3845ea72c93eafa63f04cd6dc624ded5c6578213f02926e12f04905cf38344f4
-
SSDEEP
768:qICv0lOInW72Sp4hIKwN5YDOLyZcUrjwPfn0ykwYqzXkNv:ZXnW7fTKwNGOYy8ylzXkNv
Malware Config
Extracted
gafgyt
5.253.246.12:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf family_gafgyt -
Gafgyt family
Files
-
1c65981ad058f1f5b3c73156b019e106.bin.zip
Password: infected
-
6a581241ff8eaf5cc417bf849cae2fe3471ded662a41445aa950d27897e40edd.elf.elf linux sparc