History

qjerome b2895c367e wip-embed-analysis-svg (#3 ) Reviewed-on: #3 Co-authored-by: qjerome <quentin.jerome@circl.lu> Co-committed-by: qjerome <quentin.jerome@circl.lu>		2024-07-02 14:18:24 +00:00
..
analysis	chg: reprocessed all logs to include dst_port in graphs	2024-06-27 23:01:31 +02:00
ad69790f301c6b7cebaa84a7fecd6431e87b09526d81a3c618bdf985e08edf3b	repository re-org + sample analysis	2024-06-19 16:49:36 +02:00
README.md	wip-embed-analysis-svg (#3 )	2024-07-02 14:18:24 +00:00
virustotal.json	sample-doc-attempt	2024-07-02 11:41:17 +00:00

README.md

Sample Information

VirusTotal Threat Label	trojan.gafgyt/mirai
md5	8022d0f0f16843e1c5270a7116e478e4
sha1	fdc75f9bce2f041f6573ccc72979a540960ff269
sha256	ad69790f301c6b7cebaa84a7fecd6431e87b09526d81a3c618bdf985e08edf3b
sha512	e0e7ef64719065c38d0a7658f62c0dcb81e67ed8447118250ae5834204cc9e421a1d747dfabdfb995fc61f0c4e97dd74f5ce4e149664a6ebcab5f6b2d8d5017a

VirusTotal: https://www.virustotal.com/gui/file/ad69790f301c6b7cebaa84a7fecd6431e87b09526d81a3c618bdf985e08edf3b

Analysis

Detection Names

a variant of Linux/Gafgyt.WN
Backdoor.Linux.BASHLITE.SMJC11
Backdoor:Linux/DemonBot.Aa!MTB
Backdoor.Linux.ivck
Backdoor.Mirai/Linux!1.F3F6 (CLASSIC)
DDOS:Linux/Gafgyt
Detected
E32/Gafgyt.AU.gen!Camelot
ELF:Agent-AYQ [Trj]
ELF:Gafgyt-KS [Trj]
elf.Mirai.2002004
ELF/Mirai.ASW!tr
Elf.trojan.A12367304
Gen:NN.Mirai.36808
HEUR:Backdoor.Linux.Gafgyt.dd
Linux/DDoS-BI
Linux/Gafgyt.Gen28
Linux.Lightaidra!g1
LINUX/Mirai.Gafgyt.
Linux.Trojan.Gafgyt
Lnx/Gafgyt-FEEU!8022D0F0F168
Malicious (score: 99)
malware (ai score=100)
Malware.LINUX/Mirai.Gafgyt.
Static AI - Malicious ELF
Suspicious.Linux.Save.a
Trojan ( 0040f4a51 )
Trojan.Elf32.Gafgyt.koqfyn
Trojan.Generic.36456695
Trojan.Generic.36456695 (B)
Trojan.Generic.D22C48F7
Trojan.Linux.Gafgyt
Trojan.Linux.Gafgyt.cab
Trojan.Linux.Gafgyt.m!c
Trojan/Linux.Mirai.a
Trojan.Malware.121218.susgen
Unix.Trojan.Tsunami-6981155-0