Behavioral task
behavioral1
Sample
jew.sh4.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
jew.sh4.elf
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
jew.sh4.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
jew.sh4.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
jew.sh4.elf
-
Size
92KB
-
MD5
ddb1b56e4cdf19313bc73396ad632816
-
SHA1
3737c6481573c76f8df31a02a7e589e97982779f
-
SHA256
3cd8f829bcf3c3242a369e5d364de494038cc3a1495c4562aa2179691a63376f
-
SHA512
a3e851922c76f6b83285b8d232d08cdcb3d3d83ed502f888297f5d1c7a796d06776b4a81bc4e6764a19b161c56f5172bf92c353744b3133d741862d64212d6ce
-
SSDEEP
1536:wqYvWSfoghyKGhI+fD1wNKGFKBv8cGRtICshbn6eDSeAsC5SczZSbULWZJgP7EQS:J+ffMKGhjBeRtICsVF2XdSwLOJgP7Zm7
Malware Config
Extracted
gafgyt
45.148.10.136:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
jew.sh4.elf.elf linux sh