Behavioral task
behavioral1
Sample
cbf3dee0f34ae812cc485a37a6f1442e7e51e4d8f931a3d6a383ff2555c44381.elf
Resource
debian9-armhf-20221111-en
debian-9-armhf
0 signatures
150 seconds
General
-
Target
c3b58449cae7b337a35a412922d02fd9.bin
-
Size
71KB
-
MD5
b251cc426bbf73ceab9c739a3b611f77
-
SHA1
1f75190cbb0c7c215010f34426d5073586fa7c36
-
SHA256
419f5a9e2570c74670f5bed9255d03427f21487db300fa6a2312b4783f52686f
-
SHA512
03fa88392ac2179cf71f90339d83e4fe8f436d28604f86c17e90baf2b8ab61ef3bd9c7bd89ce2ea6c7226f95f56bd560ce5b13baac86bac9ecd691e055d4cd8a
-
SSDEEP
1536:kjlAzKqds5v5ishh6g5DesFqLU1doXov0GtKDR/IH24IFuh00:kji/dC4shh6O97oYMcPHyYd
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/cbf3dee0f34ae812cc485a37a6f1442e7e51e4d8f931a3d6a383ff2555c44381.elf family_gafgyt -
Gafgyt family
Files
-
c3b58449cae7b337a35a412922d02fd9.bin.zip
Password: infected
-
cbf3dee0f34ae812cc485a37a6f1442e7e51e4d8f931a3d6a383ff2555c44381.elf.elf linux arm