Behavioral task
behavioral1
Sample
86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
8128f326c9b812e36aa77b2f042511e8.bin
-
Size
39KB
-
MD5
b84eddae373a31ca0e44152a01a891ae
-
SHA1
4b21a9729dfd4ae2ff362d9e8508f070d1328416
-
SHA256
a6e60a6afb60e6889921237cbd167a70c49663527cd82191a772eb3d0cd67511
-
SHA512
00825161644e308b216b14ac2d20b1ee577ba23d857aadec92caa6bad8d60d80f5d9cd4d7d20d566cac6851a9e9fa985d43942165c5cd693733425510dfc64d4
-
SSDEEP
768:t/5badqlAWLVin+7DOsYLqocoP3L39tAl2mAf5wTqkn:bboCAWLK3jX15WTq8
Malware Config
Extracted
gafgyt
195.201.59.165:1865
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf family_gafgyt -
Gafgyt family
Files
-
8128f326c9b812e36aa77b2f042511e8.bin.zip
Password: infected
-
86d0d52acd850b608c6f87379ad63a4f36d840162280da0550e05779c8cdbbdc.elf.elf linux