Behavioral task
behavioral1
Sample
1b1c1e47117c9196cd1a6a086541628fdd2ce3d694a4a6a3d4e3a270eef4ae05.elf
Resource
debian9-mipsbe-en-20211208
2 signatures
150 seconds
General
-
Target
5e6061ee64e34417c7ed0d4707f492d0.bin
-
Size
48KB
-
MD5
192f090d7b000bd0d55f0f1ca59e5680
-
SHA1
713d1d74dfc555ad0d3d22e154813ce7789665a2
-
SHA256
f0a5b428d8ef89d3a3907f3c9b63b038cb40fe7ef4a80052c649f78a025b6d7a
-
SHA512
9e20599af582d84f6235e25a4c81bf404e4276999669a7ea750c710fc9701fe8e6a33f29a914056b189226be8ca947c67733e62b51b86aa75485883ba1cc7b84
-
SSDEEP
768:ZMyomoSClXUim88J/Vgnkosan+I5AHC2EwJdQgCqTHKC+GKQ2d/LP0DV:6y5CyiYVgkWA9JpCSK5Jy
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
138.3.250.75:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1b1c1e47117c9196cd1a6a086541628fdd2ce3d694a4a6a3d4e3a270eef4ae05.elf family_gafgyt -
Gafgyt family
Files
-
5e6061ee64e34417c7ed0d4707f492d0.bin.zip
Password: infected
-
1b1c1e47117c9196cd1a6a086541628fdd2ce3d694a4a6a3d4e3a270eef4ae05.elf.elf linux mipsbe