Behavioral task
behavioral1
Sample
rebirth.sh4.elf
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
rebirth.sh4.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
rebirth.sh4.elf
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
rebirth.sh4.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
rebirth.sh4.elf
-
Size
94KB
-
MD5
c038076658fefba13dba11cdde8459f9
-
SHA1
6eae11882df802d9c914d26db5ef63bbcd3b8b2b
-
SHA256
4995f19918cd3c3e0a89a6a8f18dac6d007c0b69d6cbb2b5e9293159d796d9d4
-
SHA512
885f127e675facd90ed21c01bfd8603c2971735f2702a69675efece979ea35607368191c805101996a48e102a6b13b12bae09675efbeee6f89d88f69ec33df8c
-
SSDEEP
1536:TeDM+Vlabe0Ff5soS4yfafIdfmoDs2tSYVm+:Tj+Vlab/DDfIdm0s28YVm+
Malware Config
Extracted
gafgyt
193.151.142.87:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
rebirth.sh4.elf.elf linux sh