Behavioral task
behavioral1
Sample
987e111a434a46dd0cf734a983b0e3f238166ebe800f25de15fe613516b75204.elf
Resource
debian9-mipsel-en-20211208
2 signatures
150 seconds
General
-
Target
d5911f5cac2aad79d4527b7cb7896882.bin
-
Size
48KB
-
MD5
2ee8ab351b2a191a3cc87d4a2661ef37
-
SHA1
3777113c15c0094af1d1c892167a5e51e4cb9781
-
SHA256
ea9beaf754b45977a174376a72dd1b7d3b27b8eb9d6b071967ca96f5ae08b34b
-
SHA512
cc22f18bfed2178cac7eb5d83f9af7b086682a7b0bd94464e1bece3c18bdc4c054c5160ea1e260acd211b6c1af1f1471a85c17b9213176962296fcaad5765927
-
SSDEEP
768:UyYK6klc83dFmbRGK3zTrBPYeLgJtzKD7TkXzSXUOcVjLvgzXKONZoe23dx2G1Mz:NN6p82RG6ex1SEO+Lvg2ONZXudgGqeU
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/987e111a434a46dd0cf734a983b0e3f238166ebe800f25de15fe613516b75204.elf family_gafgyt -
Gafgyt family
Files
-
d5911f5cac2aad79d4527b7cb7896882.bin.zip
Password: infected
-
987e111a434a46dd0cf734a983b0e3f238166ebe800f25de15fe613516b75204.elf.elf linux mipsel