Behavioral task
behavioral1
Sample
2f845886e5f42f7ee6b21adf699e1b7e6b0f679ee8c9141cee4c94a52f8005bd.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
b3cd4183db4309c288dd502df476aa88.bin
-
Size
64KB
-
MD5
2360ffa467d2e99f96e37dccb864717f
-
SHA1
30314de6dca8153cc453fc673f549a18193841a6
-
SHA256
7383c4bbafed5f7e3ef4e99a74f30dd9f2a76aa29c29e692c5a3297400300eda
-
SHA512
2ab02c0fcb839d984a840b1189580cf6dd1f14f8f64b561b74ec1e9ea41286fda48e362d63b6e59071ae6a44da9c57f3c6b2648979d764650f6d78a185298176
-
SSDEEP
1536:fa5GoaqlRdHBpvSsgqsx7VPEhIV/4mU926WAIQWEao+dphwRn:f2/HdhtYqsxsICrEmao+dXwRn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2f845886e5f42f7ee6b21adf699e1b7e6b0f679ee8c9141cee4c94a52f8005bd.elf family_gafgyt -
Gafgyt family
Files
-
b3cd4183db4309c288dd502df476aa88.bin.zip
Password: infected
-
2f845886e5f42f7ee6b21adf699e1b7e6b0f679ee8c9141cee4c94a52f8005bd.elf.elf linux arm