Behavioral task
behavioral1
Sample
3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
e24c6cb2ad7faff79348361bbf40d4e5.bin
-
Size
86KB
-
MD5
255dffee04e8f6cba82f814ec41012b9
-
SHA1
411222254490c031037ffb2828f9bc8f122e1bd6
-
SHA256
dc629384c8829fb4c04a3467b2d441ee6ac3742287a0680bd460f12e6b7e0ae6
-
SHA512
331b1be86cd5b8a1cbb72c584525e0b9d33507395b335ba6096607d6ac2a2ee8ff4b3157b3de52b8c9fc1c5080ac86f1fe01d428cfd20ba78eff3aefec690d6d
-
SSDEEP
1536:C105tn0K5DOdSXatkjVnz1g8gL+REugdh/cGUN8EHRSKhJm8j9UDm:8gtF2tkjVnsCRHih/aNNECc8jWC
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47.elf family_gafgyt -
Gafgyt family
Files
-
e24c6cb2ad7faff79348361bbf40d4e5.bin.zip
Password: infected
-
3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47.elf.elf linux arm