Behavioral task
behavioral1
Sample
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf
-
Size
106KB
-
MD5
e0395f820089e3c137d8174c2b4d4d43
-
SHA1
13cb6a8baf4e11b20ab54c26e23e7f824f235efa
-
SHA256
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0
-
SHA512
1b5772d356004be06ad6e8856629f5ae1facc4bf739fa8409437a22cbbaa1f357a64f5364aa3937ca0d8a662c4b3c0ef49ba6c57f2ed54113cf83892a28cfa46
-
SSDEEP
3072:cQe1eovhRJGeoirU3aU5hfQZ6GBm7ArEfT3n:cQe1O9irA5hIYEm7ArEfT3n
Malware Config
Extracted
gafgyt
185.212.148.212:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
ea036623a16c30184ff40ef469ccb2962aa2fecfc622478d295c47e8c5c42da0.elf.elf linux ppc