General
-
Target
sex.sh
-
Size
1KB
-
Sample
240928-jr6t9avdjk
-
MD5
884dc57dd0892038d53a2d4b017504df
-
SHA1
52ab9780591ee9718ce6188a9edafc1afa05dcdf
-
SHA256
d347e32185478f56ce1c96e1e5dc3ad80ffdcf623036ca6750c60c6183a5c779
-
SHA512
25e1afb67512005fecdf47712dfc1f0c74ecb221ed0f3904ff47f3ef30948334e31426003f6590c580024f758c7ab8576412a280b5f5ce3f787b6208037db3ca
Static task
static1
Behavioral task
behavioral1
Sample
sex.sh
Resource
debian12-armhf-20240418-en
Behavioral task
behavioral2
Sample
sex.sh
Resource
debian12-mipsel-20240729-en
Behavioral task
behavioral3
Sample
sex.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral4
Sample
sex.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral5
Sample
sex.sh
Resource
debian9-mipsel-20240729-en
Behavioral task
behavioral6
Sample
sex.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral7
Sample
sex.sh
Resource
ubuntu2004-amd64-20240508-en
Behavioral task
behavioral8
Sample
sex.sh
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral9
Sample
sex.sh
Resource
ubuntu2404-amd64-20240729-en
Malware Config
Extracted
gafgyt
205.185.127.244:23
Targets
-
-
Target
sex.sh
-
Size
1KB
-
MD5
884dc57dd0892038d53a2d4b017504df
-
SHA1
52ab9780591ee9718ce6188a9edafc1afa05dcdf
-
SHA256
d347e32185478f56ce1c96e1e5dc3ad80ffdcf623036ca6750c60c6183a5c779
-
SHA512
25e1afb67512005fecdf47712dfc1f0c74ecb221ed0f3904ff47f3ef30948334e31426003f6590c580024f758c7ab8576412a280b5f5ce3f787b6208037db3ca
Score10/10-
Detected Gafgyt variant
-
File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-