Behavioral task
behavioral1
Sample
2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
9d0fab0fa1b07934b67ce6593eecc5f3.bin
-
Size
53KB
-
MD5
c0e1975574f06b2fb621f98e0e07297d
-
SHA1
eee32d3f03de8c8fa8e08ccfaabd46c06b5fec49
-
SHA256
6ba051c5411a32cdb6559cb932c5e29e073d8fca63a13a1bfec30f697f85d337
-
SHA512
214654b21d336866c7e4a8d3e9d976146d34128644892b6bdd7b34c76ba4ad0007d302f462908f8b9ab4adbd919b0dd1d399d3fc46de2abbd8a5272475026227
-
SSDEEP
768:03HQXlpCwICEuU9Y3uEtmvXeewa0CAwipcGuXyDJkeIeVgkCQtpAGzAAjhObOTnD:03QX/AktdhaZMruX8emgHQtpAgtD
Malware Config
Extracted
gafgyt
93.123.85.170:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf family_gafgyt -
Gafgyt family
Files
-
9d0fab0fa1b07934b67ce6593eecc5f3.bin.zip
Password: infected
-
2b8cccaf35c6376bb26969d13236cd9797f42f5e1a75304218c1b66c06996876.elf.elf linux ppc