Behavioral task
behavioral1
Sample
510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral2
Sample
510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
36c46ef3f8b233412b58a4a26a12ada7.bin
-
Size
69KB
-
MD5
4067608a909b5347d99d81689ee7a23e
-
SHA1
69afd3a8558a8a497c8feecf27304831d381b93b
-
SHA256
6098ad6f749629d14fe60c5c628d5d8602d29cb2805f2e215997b5782562091f
-
SHA512
25f7d365b4fa2adb4873f45fc2a763c3468d00aa61ff5e11bd4f616e7dd29361c6ee71a13e764b93546a2bfa2ff1b6310a28e90caa712295901c1838ef035ea4
-
SSDEEP
1536:S7xKzy+LrM7V3yt2rNCtGCRRlDdqFHyejlRRzOWBP1SO3NN:4xpwQ7Ut2rNCcCR72HyexRJDka
Malware Config
Extracted
gafgyt
185.196.8.31:3221
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf family_gafgyt -
Gafgyt family
Files
-
36c46ef3f8b233412b58a4a26a12ada7.bin.zip
Password: infected
-
510828d2945c8221d47b06692b3f9cd16844c1fde00055ca926bb1d903b0a36e.elf.elf linux sh