Behavioral task
behavioral1
Sample
70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
90ca9d578b6ef03b286ee6fbb3043688.bin
-
Size
45KB
-
MD5
dc834d506184b84cdc0607570d8f49c1
-
SHA1
310a3f5f53292806d5c959d5bc426958cbebada8
-
SHA256
06ea2d5170bbe0b52ffd29032bc6319102d86534fab822feeef1e0fae8beb093
-
SHA512
1dc1f9988d93fc791b86bafedf039ef3c4e55d6937b6e867210c1b623a2257383003783a549a799c39980fde63d9e0f7c5bca20b1d7cde1231e32dc14c6c210d
-
SSDEEP
768:kF5nWYwosRp7jnK23nOyz+Y6njtEAgYB0cfP7ysFIe4+9H0Syggn++sibSv/:+jwhxnK23nOq+XjtEAykTS9A+H0
Malware Config
Extracted
gafgyt
185.196.8.31:76
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf family_gafgyt -
Gafgyt family
Files
-
90ca9d578b6ef03b286ee6fbb3043688.bin.zip
Password: infected
-
70e62f7c31e8d2ce3cd42b4959d625b4fe3684752327fa791c4de047e5f92352.elf.elf linux ppc