Behavioral task
behavioral1
Sample
roze.sh4.elf
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
roze.sh4.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
roze.sh4.elf
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
roze.sh4.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
roze.sh4.elf
-
Size
155KB
-
MD5
6d6ba47a1504cf858210d7d0d7e98c3a
-
SHA1
d94c6317c35303ccaea23de9ae7faddbe60474d8
-
SHA256
e74a8e093acd847ff86ff9fe6f469c9f22f77d3d898a8a2c56f3952e437ece13
-
SHA512
458064e960a8b153492ad635117149fe8f3a50d55c3e9905904c6703bd658515d43cfcd59d89a7d9b6caf88f358246a3d8ad00244ac98bf04b28ccb8141bdd71
-
SSDEEP
3072:egC6SR56hROXPfYONTF6Pl5hRULMmwsweDdAH:eLRAhRGhn05hRUImwsweDdAH
Malware Config
Extracted
gafgyt
185.82.202.195:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
roze.sh4.elf.elf linux sh