Behavioral task
behavioral1
Sample
7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
7a6b4cd751ab214e93ee8b2c0935465c.bin
-
Size
44KB
-
MD5
af1a0fe6da13e0ffeb1bf24bc2d9c194
-
SHA1
e51042bf16c9dc178ec974c37cd19b27ae7e7049
-
SHA256
733f87ca5ca48fb3e42e4696d22a6341d6fade78ae649b8af7d9b4f2c97eedef
-
SHA512
6c375bcf83650f41a1dbe17450b762618f3bf5dbd60e2a4e9ddab8850f42c68e9e4564673931f6e5f1c4d3cd062c28daf0e2e5e99702cd7b80d6bb0a37b8c56f
-
SSDEEP
768:DeFG4A+8J1G3KzMz4uUHjKS/rXgy1sIZt3CRIXUj7VQ/z:c5A+8PG3Koz4TH+SDXT1hZp
Malware Config
Extracted
gafgyt
94.228.169.3:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf family_gafgyt -
Gafgyt family
Files
-
7a6b4cd751ab214e93ee8b2c0935465c.bin.zip
Password: infected
-
7f058afe835c80569c7f8b864b957c466b03a7bb281a4a5a83eb49283c720c89.elf.elf linux