Behavioral task
behavioral1
Sample
powerpc.elf
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
powerpc.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
powerpc.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
powerpc.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
powerpc.elf
-
Size
138KB
-
MD5
e1981c1db7ee679dcc31a58005dbd67e
-
SHA1
09a66df3f979bb3e84fe56b72368d8aee0e0f6da
-
SHA256
8c30c99df818794730d90dca9f0d769391e8232b0ce315ee7c4b6f257069f2a6
-
SHA512
8c1c3ffc54df4cf97a74d1c192fc50fdb0b9255e1b8b721df8dd2177560183597c2af066524be45b69776364d9fbd6943a407572a56b219f8c69dce92143fced
-
SSDEEP
3072:eVrQyEDCvqBvpnTy3c5hgrJ3JCI0Dmzj0qDJAGyoze:eVrQyEOvqbnT8c5hg6I0Dmzj0qDJAGyX
Malware Config
Extracted
gafgyt
159.100.14.37:6060
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
powerpc.elf.elf linux ppc