Behavioral task
behavioral1
Sample
0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
2680ab43bbe05ee8b1cf07b380388157.bin
-
Size
62KB
-
MD5
92fdae9f8c7226bf9497818de695e908
-
SHA1
dc59ed06d8d86a39c83c890797b10ed277891399
-
SHA256
67c60e7432d5e7210374071669f76212921644e42bf503f80eb07227519168cf
-
SHA512
72001e32ab9ccf5f4d53ed4337e6c8464a33cd8c48b916d76b2da282cca1b495e0ff00e487a0a2118be425c45ca62bf2b360389b87faf4b63d222ef7bf7e22ee
-
SSDEEP
1536:WkU698JcGnE/Y/5SnnJXHlY08r+313aa4luTYgrkrTcIxw:Wn+4dEA52J8CBaZDrTVxw
Malware Config
Extracted
gafgyt
93.123.85.167:77
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf family_gafgyt -
Gafgyt family
Files
-
2680ab43bbe05ee8b1cf07b380388157.bin.zip
Password: infected
-
0d1484c3be6c18c1a12c91e2cd2f0760ec348ac5fd948aabd0f43acabcc33f16.elf.elf linux ppc