Behavioral task
behavioral1
Sample
pl.sh4.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
pl.sh4.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
pl.sh4.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
pl.sh4.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
pl.sh4.elf
-
Size
94KB
-
MD5
da4f3f04009b498f7f51f76852e924a1
-
SHA1
26250b5855585218d9dc01114866fd443c1cae85
-
SHA256
60cfd59cfae42dc1d084d6aa501092dcf14be4d6be8825a76448034e140e403c
-
SHA512
306678822c99d15656cc95c24e7a33925be71eb6386e92fb5dce89d1c939680418c03b6e12ca44a0def43310ca3ff1b50dd6aa4b13076dfb924799936290a07d
-
SSDEEP
1536:TeDM+Vlabe0Ff5soS4yfafkdfmoDs2tSYVm+:Tj+Vlab/DDfkdm0s28YVm+
Malware Config
Extracted
gafgyt
141.98.115.226:808
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
pl.sh4.elf.elf linux sh