Behavioral task
behavioral1
Sample
a363f52765083cad2b82218dd40ece2fde884674cb8f3d6601345e11aaae3810.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
0 signatures
150 seconds
General
-
Target
6b1c8e6018f5aee99a0196ad2c80ad5e.bin
-
Size
43KB
-
MD5
6f20e59526811007d0b18ac684980777
-
SHA1
80bb7a61616bd518d811153c162b070018682ac5
-
SHA256
c87ef8c05cd497c4db22e8d73b692fb279f844ce9430687516aa8e828fcff71b
-
SHA512
f2ad8c765b2beaaadc0023f9f44fc2b68796c2e03b003ae8a88a5e7272e619216d3f6ea47d654aa07f25c8d8b0c723e7897ce7376400e7179e3162cb58e904ed
-
SSDEEP
768:Mc/5App8mBJXth1dCxgvcD/ygyQ2IWhRV+2tBIZDG6nl1vAaypqDpcD7jyN4K:xAT8mBJXfQ/jU1hzrnUl1rSPHeNj
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/a363f52765083cad2b82218dd40ece2fde884674cb8f3d6601345e11aaae3810.elf family_gafgyt -
Gafgyt family
Files
-
6b1c8e6018f5aee99a0196ad2c80ad5e.bin.zip
Password: infected
-
a363f52765083cad2b82218dd40ece2fde884674cb8f3d6601345e11aaae3810.elf.elf linux arm