Behavioral task
behavioral1
Sample
6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
dddfd7d9bf93f1a9a71fbdbe6a1d774d.bin
-
Size
51KB
-
MD5
22c6a79104ed5d3c655bf1e682409e93
-
SHA1
57a72d177a152c6da52e6ffeaf31100c9b7d96ca
-
SHA256
8cb92e1dcfb2ed5cd9828777404aee208cb2c5ddf3cc9d3da7cfbacf1485a4f9
-
SHA512
2e85600cf92fa4ff6b8ba1113c0cde49693d2072eba4b88d80ea3b05a204634bfb46288a27db823e0b0031880e9cf78afec803e2b063dcf530819e1dd89ec30a
-
SSDEEP
768:NSDz2AvjhCdo7ivInVUJuhb9a+zT5s8CJN17/jETVP5AryXk9TdtGIo6W1cRE3Jo:NSDzkeTVUJ+wyNs8IK6jYIohkE3W
Malware Config
Extracted
gafgyt
185.216.71.152:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf family_gafgyt -
Gafgyt family
Files
-
dddfd7d9bf93f1a9a71fbdbe6a1d774d.bin.zip
Password: infected
-
6ecbf797a531009af09e99f7a945f0bd0fa3a4532c51300a75d785b355b13ee1.elf.elf linux sparc