Behavioral task
behavioral1
Sample
2d204e0a17b9333d2b5d60a01cc57e0398cfa08d3ac5544b76962f8e8b524980.elf
Resource
debian9-armhf-20221111-en
3 signatures
150 seconds
General
-
Target
6806ab3e23c595db94ccaa1c239da207.bin
-
Size
73KB
-
MD5
8d3f0dfee9893d58a6954098ec85dd3e
-
SHA1
36e035d821705dc16f4c63de98a89807555c2cab
-
SHA256
3b0f11e71f2d9a51bc1994b582372151e2406c0f75f62f361de455911d4fe204
-
SHA512
d7e11a4dddbea1eea9dbe854c95087cf4883350bc16117de708d24c5c96ab68c4768060396f2b3652aafac05d44e7005fbc11a26b1b826d8498d74edd4d30a0b
-
SSDEEP
1536:drHxTco5BLJOdAj7Ibf443w4fC7WrjpQmtQaznO5/ottIqmZ:LLJxYbLdCCr6mtQFRq0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
101.99.91.77:812
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2d204e0a17b9333d2b5d60a01cc57e0398cfa08d3ac5544b76962f8e8b524980.elf family_gafgyt -
Gafgyt family
Files
-
6806ab3e23c595db94ccaa1c239da207.bin.zip
Password: infected
-
2d204e0a17b9333d2b5d60a01cc57e0398cfa08d3ac5544b76962f8e8b524980.elf.elf linux arm