Behavioral task
behavioral1
Sample
02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
804ffb52bd9cfc282153a1d02f589879.bin
-
Size
55KB
-
MD5
ce301775fce23fd49800cc84e7404b71
-
SHA1
65fada865e2a34ccc4590984f28ef95ef96580c6
-
SHA256
e51ffcc9a1973dddcb58883bc7380bab327f46c5af7e42d72933cc57a793d65e
-
SHA512
e8530bc0c614140cc03518b4904b58ebc03484ce249347132efcde5b4308ae9e7485e3b7b83fbfcd67e93089cf9be60fa475a5a7127ace19a01ab2f8591ef925
-
SSDEEP
1536:KQkyqegF9Xx+e3yiE5C4fFcyyB6vWt+Ye+jJ/kG:KQkyqTbkeidXFcyy8vWJvVkG
Malware Config
Extracted
gafgyt
93.123.85.170:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf family_gafgyt -
Gafgyt family
Files
-
804ffb52bd9cfc282153a1d02f589879.bin.zip
Password: infected
-
02db75309528fe753e835cddb0277b04d765fdb63ce599a090d528766a120cab.elf.elf linux sparc