Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16 |
Source: g4jUx3nLmP.elf, type: SAMPLE |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16 |
Source: 5472.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16 |
Source: 5473.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_6a77af0f os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 4e436f509e7e732e3d0326bcbdde555bba0653213ddf31b43cfdfbe16abb0016, id = 6a77af0f-31fa-4793-82aa-10b065ba1ec0, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16 |
Source: 5475.1.0000000000400000.000000000040f000.r-x.sdmp, type: MEMORY |
Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16 |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3122/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3117/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3114/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/914/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/518/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/519/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/917/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3134/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3132/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3095/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1745/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1866/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1588/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/884/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1982/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/765/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/767/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/800/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1906/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/802/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/803/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1748/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1482/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/490/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1480/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1755/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1238/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1875/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1751/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1872/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2961/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1475/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/656/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/778/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/657/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/658/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/659/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/418/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/936/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/419/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/816/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1879/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1891/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3153/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/780/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/660/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1921/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/783/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1765/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2974/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1400/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1884/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2972/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3147/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2970/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1881/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3146/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1805/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1925/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1804/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1648/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1922/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3165/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3164/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3163/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3162/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/790/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3161/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/792/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/793/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/672/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1930/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/674/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/795/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1411/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2984/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1410/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/797/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/676/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3158/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/678/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/679/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3170/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/680/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3208/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1940/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3203/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/726/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/727/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1946/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1944/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3209/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3181/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2496/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3100/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3220/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3185/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3183/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3182/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1832/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1432/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/3212/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/855/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/2926/maps |
Jump to behavior |
Source: /tmp/g4jUx3nLmP.elf (PID: 5476) |
File opened: /proc/1691/maps |
Jump to behavior |