Behavioral task
behavioral1
Sample
4387c1be9255ee394e49a49f2f302d3e0def1b397f3b3515abeb2c88858ae506.elf
Resource
debian9-mipsbe-en-20211208
debian-9-mips
2 signatures
150 seconds
General
-
Target
7298e80f099dde9db20b0be02971b325.bin
-
Size
50KB
-
MD5
3a796c2e48730fbd70de1042d97dc441
-
SHA1
d31dbef6ea0e4a1419062ec93e0d5b3529288f8c
-
SHA256
a89caef45b791bc764797a937458ecfaa75b7b58a168e8a53b4cb2798e7734e6
-
SHA512
9eaf887644e0f309c39d0fdc8d9c2b03c2ee99c7fe107d00ac66a5fc0d0591bb7c1435d2d3bf70d5d06c9e88b902124c0a3dacf671b1cfe8d9e689947dbee1ad
-
SSDEEP
768:oHHfqink0LReU0WwKysral3iLiciw9goG7J3XIkMg0U6tHZXgSvA5EmR:onSPOMWwRS3Z0IkhkTXy5EmR
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4387c1be9255ee394e49a49f2f302d3e0def1b397f3b3515abeb2c88858ae506.elf family_gafgyt -
Gafgyt family
Files
-
7298e80f099dde9db20b0be02971b325.bin.zip
Password: infected
-
4387c1be9255ee394e49a49f2f302d3e0def1b397f3b3515abeb2c88858ae506.elf.elf linux mipsbe