Behavioral task
behavioral1
Sample
shellv.ppc.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
shellv.ppc.elf
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
shellv.ppc.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
shellv.ppc.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
shellv.ppc.elf
-
Size
110KB
-
MD5
fae4f04507be5b6678ee051ded5fdbfc
-
SHA1
e0337d191a7589b109846aa739ecc7382c95cf09
-
SHA256
bcc23a3fca40a1cafe92fa4900c197f29dab29ab70bd8411ca944df973cdcefb
-
SHA512
e6ab5beca006eff792abcc43b22bd12e42e2d2307a03b061c038eb20f11a697dc88383d415b5f3a0d461d62971f3ad7f681b677cb8c262f7a8329d913037aebb
-
SSDEEP
3072:eDzhqL0vbKlnvZ0pqu92TqsFh7tm2pgYMidIP1W:eDzhqL0vbKdvWpqy2FFdtm2pgYMidIPo
Malware Config
Extracted
gafgyt
94.228.169.3:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
shellv.ppc.elf.elf linux ppc