Behavioral task
behavioral1
Sample
7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf
Resource
debian9-mipsel-20240418-en
General
-
Target
59087681140ec73425248bbd2e35553a.bin
-
Size
42KB
-
MD5
db970359dff8345d732e6543059c9f64
-
SHA1
8202bb2a3b09ce6759bc3c1e068e6cc3a896c894
-
SHA256
764690a8aaa1039bc4d0d41272bedc16cc148c3be9141f56f5fec221de787c2c
-
SHA512
139108eab8500adbc7c06ba35c185b0ace7ca978dd161c18ce6b2d47a58fc44551088ec17aaea44b294cba659a8242736f2dc20e5b57409eda0d4b1ae15dc4bd
-
SSDEEP
768:rpVyUc+hS8vDN1B/5QRHOe+DWroCLpimnO+Vzb3mZwmpO95vg/j:rpV5c+pDPJMujWroCLp/nOODm9pwg/j
Malware Config
Extracted
gafgyt
93.123.85.251:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf family_gafgyt -
Gafgyt family
Files
-
59087681140ec73425248bbd2e35553a.bin.zip
Password: infected
-
7cf457f6e3a54354c75ed474f6712b08e8abf3f697cc8c08d578721a265a7deb.elf.elf linux sh