Behavioral task
behavioral1
Sample
83f31acb3715d3b70b5714ce80c1f6f44208ea1bc1adc1e97e768c1147c2f6a4.elf
Resource
debian9-armhf-20221111-en
0 signatures
150 seconds
General
-
Target
580b6690e62436d274dea7db581284a4.bin
-
Size
47KB
-
MD5
1c47cbd2f531578b8ba7e4f511426b1a
-
SHA1
31b7c112e40917665c54cbe355bba5096e646b32
-
SHA256
5c6320b08a23656e5a90bc6aaea2819002c715d95807a91af1f19760fcb57be3
-
SHA512
57aab0c7ee8189abd0214126efdfbfb8295644c1a17063da7fb34982a8b1d8fd162ca805c6c84f3b5c75e49bdafb5a5f8401dc7fc7e34e17fcddeae332e99d15
-
SSDEEP
768:LR8DlH8irnMBTcE01t+yO3FEDAWDkWngj3lci2PA1iS2Mg7iBMqLdaJPWDL1rKwP:CxPrnecbt+tFEDRgWnMl6qiV970LdaJu
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/83f31acb3715d3b70b5714ce80c1f6f44208ea1bc1adc1e97e768c1147c2f6a4.elf family_gafgyt -
Gafgyt family
Files
-
580b6690e62436d274dea7db581284a4.bin.zip
Password: infected
-
83f31acb3715d3b70b5714ce80c1f6f44208ea1bc1adc1e97e768c1147c2f6a4.elf.elf linux arm