Behavioral task
behavioral1
Sample
e568228e13b2c13e588ecd266dae9b0c.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
2 signatures
150 seconds
General
-
Target
e568228e13b2c13e588ecd266dae9b0c.elf
-
Size
109KB
-
MD5
e568228e13b2c13e588ecd266dae9b0c
-
SHA1
6bbc91bed773d2e03cb3a10e9d881b507e48795a
-
SHA256
d7aab89fdf7fa8b63272472af6b8a1387e6b0f6c5fd47b451abb6e1c22729056
-
SHA512
940dcd7c79231f662fef11cedd7c88ad3104a79151e4875b395f4fb452b98a3f9c794af4639c87872689a3939eba415978775ef5f18ea9f35ed7431a5baeda25
-
SSDEEP
3072:EbIl2rZjfa15tdh/ndlV36GuNmPpumAQOqzXczN:EbIatfaTh/ngwumAQOqzczN
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.172.114.157:61915
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
e568228e13b2c13e588ecd266dae9b0c.elf.elf linux arm