History

qjerome 6663e52698 old school md link		2024-07-02 16:16:57 +02:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
44c21f98d1fe78e1466ddc9dfd1113e1e416934b6a0eb2b1da0bcf27535f7775	repository re-org + sample analysis	2024-06-19 16:49:36 +02:00
README.md	old school md link	2024-07-02 16:16:57 +02:00
virustotal.json	sample-doc-attempt	2024-07-02 11:41:17 +00:00

README.md

Sample Information

VirusTotal Threat Label	trojan.mirai/gafgyt
md5	cadc906c5123702e80d8047cabc77170
sha1	a4e4f736200d84284d67bc41361638ff43f0e99d
sha256	44c21f98d1fe78e1466ddc9dfd1113e1e416934b6a0eb2b1da0bcf27535f7775
sha512	04e43ef9e24f050a2e1223bbcf3f20bac34913d1425929232fd1bf3e4a3f5e5bbc3dac60c0026682be5540a05cfc72d15c123fd5cc5a41636d517b7c1811d3d8

VirusTotal: https://www.virustotal.com/gui/file/44c21f98d1fe78e1466ddc9dfd1113e1e416934b6a0eb2b1da0bcf27535f7775

Analysis

Detection Names

a variant of Linux/Gafgyt.AXI
Backdoor.Linux.Mirai.wan
DDoS
Detected
E32/ABRisk.EROA-7
ELF/Mirai.A!tr
ELF/TrojanGen.A
Exploit.CVE-2017-17215!8.1058B (TFE:17:5yO1GHIYYTK)
HEUR:Backdoor.Linux.Mirai.b
Linux.Backdoor.Mirai.b
LINUX/Gafgyt.pvebx
Linux.Siggen.9999
Mal/Generic-S
Malicious (score: 99)
Malware.LINUX/Gafgyt.pvebx
Other:Malware-gen [Trj]
Possible_SMMODUPXA
Suspicious.Linux.Save.a
Trojan[Backdoor]/Linux.Gafgyt.a
TrojanDDoS.Linux.nk
Trojan.Generic.35965739
Trojan.Generic.35965739 (B)
Trojan.Generic.D224CB2B
Trojan.Gen.NPE
Trojan.Linux.Gafgyt
Trojan.Linux.Mirai.K!c
Trojan:Linux/Multiverze
Trojan.Malware.121218.susgen
Unix.Trojan.DarkNexus-7679166-0