Behavioral task
behavioral1
Sample
673203aa86c58b8c5d2af610ba59e61800e390eeea0e8e6c02157b8f219a40ca.elf
Resource
debian9-armhf-en-20211208
3 signatures
150 seconds
General
-
Target
708e9dc944fa9e36b62881d6ac08c8aa.bin
-
Size
64KB
-
MD5
8d9338487f4cb1526969f00c3090fea2
-
SHA1
7c43a7934fbe2bc966a01c815efef385cd5e841d
-
SHA256
a8615d2c052280ffd105a5c9872fa663e4cb4e7b88e6bea0924a96f3261942c1
-
SHA512
7f2d3a7938b5719f7066cd42a77f78f74da996e2ee249d4d60e05e7cce5b4c80bb111a417b73d033003813149a59df5f1f3e1f9a93b09c1d498acffe2e2af0f5
-
SSDEEP
1536:manSLFFb3W8O3FlzYOp/kCKNq4BM4mKUBiziufkXaKq9zaU8rKOSgx:eFJ3tODzJ/kJTB992ZXaK4zaUlOPx
Score
10/10
Malware Config
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/673203aa86c58b8c5d2af610ba59e61800e390eeea0e8e6c02157b8f219a40ca.elf family_gafgyt -
Gafgyt family
Files
-
708e9dc944fa9e36b62881d6ac08c8aa.bin.zip
Password: infected
-
673203aa86c58b8c5d2af610ba59e61800e390eeea0e8e6c02157b8f219a40ca.elf.elf linux arm