Behavioral task
behavioral1
Sample
s-h.4-.ISIS.elf
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
s-h.4-.ISIS.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
s-h.4-.ISIS.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
s-h.4-.ISIS.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
s-h.4-.ISIS.elf
-
Size
92KB
-
MD5
7c24117296f9dceb4b580c626465f73e
-
SHA1
79e774957af83efba788fc35941beff5c9bbdea0
-
SHA256
38bd38b988b92191d56bbfde03a0eb4f2f42e35f0c8a2ccf9dd621401988fbeb
-
SHA512
b5ed1b5b43ae8f5fa19528a94c4c45ff914d6bb5e0595705a86fdc465e80b2738d61788322ac747051f9648b9871382f7968c1100361c4662a5db78d58c1752a
-
SSDEEP
1536:fI7+hcIM9naHAAGtKhmA+J/FosGvJtKqCxDQtmW49VquLeefkcX:YNIMZoAAG0hS/FoHKqeYm79VquqefkcX
Malware Config
Extracted
gafgyt
185.78.76.132:839
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
s-h.4-.ISIS.elf.elf linux sh