Behavioral task
behavioral1
Sample
chernobyl.arm5.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
chernobyl.arm5.elf
-
Size
120KB
-
MD5
d892a0de228e04e8943bb7e28c430ab0
-
SHA1
49b8af2cea19626fa9a59d2a120add95f62b821a
-
SHA256
0bb7abd54503ac909db2b5575321a0aadef1bf940cde09cf4e7f6eb2611faaf0
-
SHA512
9099b6a2881365016f4c9549ca258016a75add662466617c7bfc43fcb2d910432dc86baa6f9a32435b761304770c14c86404b4c2cd9700df3fd0a6a5f998da1e
-
SSDEEP
3072:5a5QDpDeRWa25UO8R1DyRULR+mwQYY5QXhga:o5QDYWack1DtR+mwQYY5Ghga
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
88.214.20.184:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
chernobyl.arm5.elf.elf linux arm