Behavioral task
behavioral1
Sample
e6e41c406c577a109268378c3fe6536f6eeb5aa14ef23d2f8d22681873a0e0a5.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
0 signatures
150 seconds
General
-
Target
a29348cc4a526008b130427916505d62.bin
-
Size
41KB
-
MD5
3c7288f88217e4c763502048d4feef5f
-
SHA1
d4f0bd3456d122d3d2a72febe36266709459bb58
-
SHA256
d8d281fbb83e177b4153acfbddeec3d77df2d9b16a402e73329168adf3a8d9fc
-
SHA512
3c6e49bf3cbcb8381c0e5f4318d67a9dfd9ae263fc288cb8ac0bbea105d33233db59c834a23c8c000e4f48df05c2c64e2a88e39c09c1dbd10ed148e9dbcebbb5
-
SSDEEP
768:NArDuEWXBaGjQ0kLKCbCXeUUiKOUQUZ+gi8nO72wf4:N6nWX0GdKbC7uOUQK+gi8nG2wQ
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/e6e41c406c577a109268378c3fe6536f6eeb5aa14ef23d2f8d22681873a0e0a5.elf family_gafgyt -
Gafgyt family
Files
-
a29348cc4a526008b130427916505d62.bin.zip
Password: infected
-
e6e41c406c577a109268378c3fe6536f6eeb5aa14ef23d2f8d22681873a0e0a5.elf.elf linux arm