Behavioral task
behavioral1
Sample
6a08ac7fc4891bac110ba648cc1fbe810ae9fd08bb5a584ee1a7996362a923c5.elf
Resource
debian9-armhf-20221111-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
595d21d03f4f45ec14d8560ca18b9719.bin
-
Size
51KB
-
MD5
b393bbe6f340b2e44675c0a16da06d31
-
SHA1
50334eb31d313b797e0431bf9660c78698850bca
-
SHA256
b80d526e0097e4041f377a67d8dc9c767a892cf42fdfe521435c0dad4497cab6
-
SHA512
1660533c83d3e085302c54fd1046a93d5125dfc3f59a19585f940b735de6359f5375904c405d576c0875ec0bf51a8ecccf1a857f6d75c53b44ac2efc54360c0b
-
SSDEEP
1536:eCWKjW6A6wPZRPkgpPVT9GfvV+iQ9APbEwvJu4H:lW4A6wPwgpPVRGHVJQQbTH
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/6a08ac7fc4891bac110ba648cc1fbe810ae9fd08bb5a584ee1a7996362a923c5.elf family_gafgyt -
Gafgyt family
Files
-
595d21d03f4f45ec14d8560ca18b9719.bin.zip
Password: infected
-
6a08ac7fc4891bac110ba648cc1fbe810ae9fd08bb5a584ee1a7996362a923c5.elf.elf linux arm