Behavioral task
behavioral1
Sample
16f3472f5b8a6c0eeb0e89415f188ee44da9b66cc58298bfd7e71fd6d8fcc1b8.elf
Resource
debian9-armhf-20221111-en
0 signatures
150 seconds
General
-
Target
937c02adad327dd4046a5d0a8f31e3e4.bin
-
Size
57KB
-
MD5
ef6eae9d213bce0cbfe882c7de02d2f9
-
SHA1
bb87aa47637352bff42db3d33d4831279d711307
-
SHA256
a0fa39b01db1b444c659e127d2c28f6b1e5b71f03ec2659975b8a05b0f337a8a
-
SHA512
8601f00bfef67c1ff4ec293ff847dcf6903050451b5e5f2ca3e55f0ccabc5d44a70ad18ce158d6818775f0d0149b8083bc4bb55af03f86a9128446642f9f69d2
-
SSDEEP
1536:GXnb36YtG1whfcQ2/b5nLyHtyWK9qgffLH/jE07y5hs7H+q5:GXb3yc2D5nOIWKsgTjE07y5hs7HH5
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/16f3472f5b8a6c0eeb0e89415f188ee44da9b66cc58298bfd7e71fd6d8fcc1b8.elf family_gafgyt -
Gafgyt family
Files
-
937c02adad327dd4046a5d0a8f31e3e4.bin.zip
Password: infected
-
16f3472f5b8a6c0eeb0e89415f188ee44da9b66cc58298bfd7e71fd6d8fcc1b8.elf.elf linux arm