Behavioral task
behavioral1
Sample
m-i.p-s.GHOUL.elf
Resource
debian9-mipsbe-20240611-en
2 signatures
150 seconds
General
-
Target
m-i.p-s.GHOUL.elf
-
Size
114KB
-
MD5
dde5abe97c0c71d80553705af167276c
-
SHA1
79d17fea6d9fa31524e7fa23b5cf578dc5959587
-
SHA256
d1320708e676364a958ed5d5b1f4f00173f8fec54ec8a8338d688b0652d1216c
-
SHA512
c5fa28885a89938af097be3f456fe4650bf78bbe56bfc40fec13fe314f53f3400879c3f78750a20545c3c73aaca0aa488164f033df0416c4020f23d368645602
-
SSDEEP
1536:j7ju1Tepq+XLYh2rKVnePLn4BeCUd89F/rMBIYloUmkiSFxfC7xbXe:SsQKLn4UG9F/oOY6UmkiSFxfKxbXe
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.157.106.238:1111
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
m-i.p-s.GHOUL.elf.elf linux mipsbe