Behavioral task
behavioral1
Sample
d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
6d3e06c12abf61d1ab3fe22390359c6d.bin
-
Size
50KB
-
MD5
597c0de6646f68d903db2fa1c2d8808c
-
SHA1
cbd23a6f5d1fee12c6e66c7399a0166604fae1bd
-
SHA256
80e61ac42d898253929f2f96896fa40ad7a4ae45f39f9f95a3d94a2ab61994f7
-
SHA512
99d9777774a4f64056b60a19e1e3971c94e95d55bf95f77cb39876d54107f8d9bd6f18ad51bddd7df0454026966ca03f650c0d9630e34d0ffe429867f9ea6d93
-
SSDEEP
1536:zROUsu/9qqKLHOk56O8qrT41jYpCaFexzy:ECquNqASnexe
Malware Config
Extracted
gafgyt
103.153.69.150:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf family_gafgyt -
Gafgyt family
Files
-
6d3e06c12abf61d1ab3fe22390359c6d.bin.zip
Password: infected
-
d8c2c66c6ea20abf7bb90366490d61e8f07442d46834a7550f3035a65f8ed081.elf.elf linux sh