Behavioral task
behavioral1
Sample
94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
feb361105560a78c09776b959a18f89f.bin
-
Size
39KB
-
MD5
1509b2d628f2e5a3d11eb96f1093c319
-
SHA1
190a665e219d81d1ad4ebc378666ab09d46c81eb
-
SHA256
6bac9faa0e2ee38b09ed417c3a977af7a923473b0ce4a0482936e0d56ff47ce8
-
SHA512
6ed68c289e474c29ec9a79244e67c246f70da21d38ad84c662d55e4667907e76ca1b78d3cd908ad5284a1e3d2f5c44b90bf87e92b4c8afc134848ff78664e15a
-
SSDEEP
768:R4EDOmiRw2HvXYxbBCpmghN0qB6p2S3mCg20rPrZw/WeXPSeWNmVPXQ:eE6miXvXYxbUljB6p2S3SD1w/PSeWNmm
Malware Config
Extracted
gafgyt
188.245.84.178:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf family_gafgyt -
Gafgyt family
Files
-
feb361105560a78c09776b959a18f89f.bin.zip
Password: infected
-
94447f893bd0ac929c8d2c6c584c1efd4a9158b1a7d7f35ac73593b71b771004.elf.elf linux