Behavioral task
behavioral1
Sample
0e191a8587791b01e1f6fbf2bc6c99febfb19a06945577abf6d3b374fb74b325.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
3cf60d00aee70afc375cb5e8a19b8679.bin
-
Size
57KB
-
MD5
f90e6b5343d3b0d5ed84ee68b73c36a7
-
SHA1
fc22eb3a83a03585d2df0d10daed04e42ee7ff62
-
SHA256
5fb3c742318c36c9ff609b5be297f3181965ef73e9a441bff0d651f750a97aad
-
SHA512
6522e43d3b00f133740b3d9852995c24f542c4cac772eb2073ade1656e0814e88789215672480fff9f5bbbcbb7ea2838d811ff032c9045f54f02d45af994a31b
-
SSDEEP
1536:3SGU8za0IVpYsA7ybWDtYWnrsSCjJdI5c0ooH:3SXaa0IPYsmyboYWT+J8cyH
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.3.250.75:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0e191a8587791b01e1f6fbf2bc6c99febfb19a06945577abf6d3b374fb74b325.elf family_gafgyt -
Gafgyt family
Files
-
3cf60d00aee70afc375cb5e8a19b8679.bin.zip
Password: infected
-
0e191a8587791b01e1f6fbf2bc6c99febfb19a06945577abf6d3b374fb74b325.elf.elf linux arm