Behavioral task
behavioral1
Sample
0b161903b4e40975863838bbe72cdd56.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
0b161903b4e40975863838bbe72cdd56.elf
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral3
Sample
0b161903b4e40975863838bbe72cdd56.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
0b161903b4e40975863838bbe72cdd56.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
0b161903b4e40975863838bbe72cdd56.elf
-
Size
101KB
-
MD5
0b161903b4e40975863838bbe72cdd56
-
SHA1
62ee6cb4f916e024992122def25add1146d54c2b
-
SHA256
6d7a36defea2571e0acba87a5d2dab5eb85e900e36a02c9dfcde4ce4e1c4efca
-
SHA512
592d4ab05d5867a8933eb1ff26e4b7272e1453f44f74ded1190aa09bbad975e8730d4849c825f3b514240ace6a2818b4f0ad9e40c6ae86a1d648b88bc0d3fccd
-
SSDEEP
1536:OUE35EHHexmz7HdBJBIum8x6yQryNUnsIAi0oxmyTsb62cen:OUCI57zICtdsrvmIsbdcen
Malware Config
Extracted
gafgyt
94.156.79.48:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
0b161903b4e40975863838bbe72cdd56.elf.elf linux ppc