Behavioral task
behavioral1
Sample
e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
7355329f2ffffb51ec4f36e042ab23a1.bin
-
Size
58KB
-
MD5
1aaec4551bc5d40b4f05cdbc2ab54da3
-
SHA1
8cc62a8e3bff860b1de233c1b6f8dccf56fbbc6e
-
SHA256
a531a9513dea75c2ec898e9d44ef603ea37192c8db3bcc8b9092053ed49ad4d3
-
SHA512
9a024fe45450a138fe3830cf8d57830de3c27134cc38dd4a1b2cf9315bc25123afed8157f635b8c0901d7bbdcdc27c22e8642026ecb2ac3ac00f7204f16473e0
-
SSDEEP
1536:/05d6ngtT6ResGzxw5tVCwW7RmANWsTl6M7R:/0+ngsbGzctkljIMV
Malware Config
Extracted
gafgyt
87.120.112.101:405
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf family_gafgyt -
Gafgyt family
Files
-
7355329f2ffffb51ec4f36e042ab23a1.bin.zip
Password: infected
-
e3db941ed83d3d018640fb08121ba92e497598d73fa2847db59c8acaf33a919a.elf.elf linux ppc