Behavioral task
behavioral1
Sample
555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
d1cc253a2a3dc33795e83ee23d1db215.bin
-
Size
36KB
-
MD5
d43e2b9880c7234b8650bfcd2fba96ca
-
SHA1
7311bc4b77bce6d8f3af7bea5f42cd477eee8727
-
SHA256
3601d246b946bafde8667b714a4a1fc3b3cf58e3eb923dee69a90d739be86854
-
SHA512
ca306ce6ec5c8c83dffee123aa521accb17736e391e559122cddde562fc1bd5512b046ff52cbf9bac30d0b786eced863bbf39c75b5a7244f1c191ec5e5812c62
-
SSDEEP
768:Kc7L6xxx6ELATSEMUXiWRdYLnoEWYIfHsVEzVOPFZQl0G+li:R7mf43PXiWRdQnfFIvsVE8dGPd
Malware Config
Extracted
gafgyt
5.253.246.12:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf family_gafgyt -
Gafgyt family
Files
-
d1cc253a2a3dc33795e83ee23d1db215.bin.zip
Password: infected
-
555855b0cb2aa0de31b9890f290087f7dea3af0d366ebb51027172652224c973.elf.elf linux