Behavioral task
behavioral1
Sample
897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.elf
Resource
debian9-armhf-20221111-en
2 signatures
150 seconds
General
-
Target
897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.zip
-
Size
48KB
-
MD5
5a13280407ba70a9244cbcc7d1de29af
-
SHA1
18bc2edc9af562f80e933b16ee8b28353283fe12
-
SHA256
299e7acc1cad7d71657b85224898ace9a5410e97feca816822a8b01cc8210183
-
SHA512
ea18e335a8a8412bee081e0ad45545fe614be09d41fbeb2eee88dd0e50481b8e3012a7eb03470ddf9955877ec2392bc3dc9ac7facea5ac7ddf1dee6fe5371910
-
SSDEEP
1536:knzUP3oFfG47j7IO1iKvs4YhfL1q5o2rAJmC1w:ks3ae47HIgLvGL1q5o2re51w
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.elf family_gafgyt -
Gafgyt family
Files
-
897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.zip.zip
Password: infected
-
897be69cd16a7d84c1ad288a4d5a98c394654c44f629423af9d06e5752e812ab.elf.elf linux arm