Behavioral task
behavioral1
Sample
9ae7dce519a0e200014fc623d5af91dd106820f104d7b6ff9a7fe599a6701e46.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
360ab64ae527c3d95b8ddaa5aaf27313.bin
-
Size
47KB
-
MD5
18e43b8065f78fe59de60e99510b1e6f
-
SHA1
c98c5c45d3358eae0183fcaab2a1654153d49bf8
-
SHA256
dd76a6ff559d0320c75621314fa972f64fb86044f064b5c664fe50dcf21149ca
-
SHA512
dd6cc0241d8cb17f9cb27f1fd82a3af4e5cfb85a43d21eeed983d34b7cafd8c441436116b554c5e145a915beecc9da35e0816b5d63b8070145ff81a16ebd844a
-
SSDEEP
768:Ju7Z+dxcfoR1XbhAaitDfg+094eRzRJZ4999SAxYqSC0t4DSNfsV3az2Oyx7lnMS:mWxsW1XOaiZWXEXHNl0tKKz0XRV9
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9ae7dce519a0e200014fc623d5af91dd106820f104d7b6ff9a7fe599a6701e46.elf family_gafgyt -
Gafgyt family
Files
-
360ab64ae527c3d95b8ddaa5aaf27313.bin.zip
Password: infected
-
9ae7dce519a0e200014fc623d5af91dd106820f104d7b6ff9a7fe599a6701e46.elf.elf linux arm