Behavioral task
behavioral1
Sample
felkawtf.powerpc-440fp.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
felkawtf.powerpc-440fp.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
felkawtf.powerpc-440fp.elf
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
felkawtf.powerpc-440fp.elf
Resource
debian9-mipsel-20240611-en
General
-
Target
felkawtf.powerpc-440fp.elf
-
Size
90KB
-
MD5
144a5695635605270b5255ac44112345
-
SHA1
aefe135c1ed779a5e566f87e6cf13de97551a8af
-
SHA256
864e2d9d39f154c529dda7163525ab29c0f0a749e0e6a0c02cf9677b02228d31
-
SHA512
cc778390a0cb97bbd95db4ddaebada13726e0e9e6b6a172e4128cd24cc31c37b3e068d7c314b4299f8408a1c70bb6c7d10a3c7dff3d95816310e7a756084fe9d
-
SSDEEP
1536:mRQDXbi2Yob7P0Y6qsbZIcgl3JaLRDJCF0VflEmQ0VqXjtnR/HQ:mRslJPgecgl32SFmEmQ0VqXBnR/HQ
Malware Config
Extracted
gafgyt
15.204.128.30:6140
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
felkawtf.powerpc-440fp.elf.elf linux ppc