Behavioral task
behavioral1
Sample
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf
-
Size
181KB
-
MD5
3a1d14c3e57385845788086ce9e3ca0b
-
SHA1
fbe9c042cea353249f62d37b571b73dfb3f56973
-
SHA256
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f
-
SHA512
1acc97c2ec8ac4c5cb5b39fc223c44042e2be788d1358388fd47271e53aee6bc589f38fc5d54ee35a2b44b31d47f379bb96e6cb6462e9abdc01d9097623f5d24
-
SSDEEP
3072:tvq41eGNmDtVpixNOAVBFf0oj9phap2HPmRPoeYz/Dm4wABHo9n:tezVO4yHrj9phakH+RweYz/Dm4wABHoh
Malware Config
Extracted
gafgyt
45.95.169.149:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
5ac9afc80b3e81d403c92cfad785cb76e27d9ea8531ebbe34ab0140eab399c4f.elf.elf linux sparc