Behavioral task
behavioral1
Sample
18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
2c005e3e00920d91f2ce0d569a6a4493.bin
-
Size
51KB
-
MD5
70429f866a03636288bfb11238f8f7b6
-
SHA1
3b26c8f9e68d7911ef3ef30f648c1cd51ebcb67d
-
SHA256
7caa1b4d25d5b5368250f4935c3ba3b0e03b75468d877af9c4c2f97720ec35f2
-
SHA512
f431afee663603075811a68ad61d36494f9ba28feb595ac0dc486145b8d44f0840bce6e5d21f5f209071eb834cb6eb476d6b754bb8c68a777d60a6db22591799
-
SSDEEP
768:qGHSnIotXYOp3PL0P3XamsyEnsqf8SitX0TyDAXdUswdAPP7lEFOsN7wT//Aqy:bqjLG3Xamsy0RCtOL8A76NcNy
Malware Config
Extracted
gafgyt
38.58.177.229:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf family_gafgyt -
Gafgyt family
Files
-
2c005e3e00920d91f2ce0d569a6a4493.bin.zip
Password: infected
-
18ae50050b5b77499331fe32e13b5c4c658231bb608ef521125f57ff857ee3e1.elf.elf linux sparc