Behavioral task
behavioral1
Sample
626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
505f5678426ea746c53cbb453c76ab39.bin
-
Size
86KB
-
MD5
d4b8bd2ae7db981f2d98922f84190634
-
SHA1
9d43148c81f114637a569ee80c72fba92376fa84
-
SHA256
b5a108762ebac4d70968545d30ec86037d07103ad6d29ac4c7908c4f6cabfba9
-
SHA512
e8373d981b07f7f61609d66ceaf9318b728694aef9b8db7f3cb4b0814ffb99fba01a2bd884cc3b00226278b9037535ecc0c3b20b2ea42997505431c49552246c
-
SSDEEP
1536:reekJA5Fu76NfJxCGSOP+cCaub37herNYxk2LH8P1GyfKg4E502K2rqDbu0iqZcW:CBEu7sfJffCXb3NMYxk2LH8syT5lK2re
Malware Config
Extracted
gafgyt
181.214.231.152:96666
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf family_gafgyt -
Gafgyt family
Files
-
505f5678426ea746c53cbb453c76ab39.bin.zip
Password: infected
-
626499411f1d409fbd81f8be054653d3626e697f610dfb5cb0b4484ef97f8c70.elf.elf linux sparc