Behavioral task
behavioral1
Sample
f29a11c4ed3e473cc8b479a26469672b.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
f29a11c4ed3e473cc8b479a26469672b.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
f29a11c4ed3e473cc8b479a26469672b.elf
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
f29a11c4ed3e473cc8b479a26469672b.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
f29a11c4ed3e473cc8b479a26469672b.elf
-
Size
138KB
-
MD5
f29a11c4ed3e473cc8b479a26469672b
-
SHA1
907f2a7858f6f5b0b40a66ff377d5a3dbd655f82
-
SHA256
788318e1a1f6f4c8af5fcf657c8ebe75c57c9de57a58aaa85f38815867ca7f97
-
SHA512
79659dbb6a9ff3e2ebd515f0bd06aa6edaa363ea4969a1e5413ac4e445907ab6a727a18c463c72358198f49a820f4dba09d7430cc0d63a884f9dfd9b37171b4f
-
SSDEEP
3072:eVrQyEDCvqBvpnTy3F5hgrJ3JCI0Dmzj0qDJAGyoze:eVrQyEOvqbnT8F5hg6I0Dmzj0qDJAGyX
Malware Config
Extracted
gafgyt
195.66.213.69:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
f29a11c4ed3e473cc8b479a26469672b.elf.elf linux ppc