Behavioral task
behavioral1
Sample
04bba167668fb635dfb00c6e829e5bfbc90920d03678ca00096785fde7d59b89.elf
Resource
debian9-armhf-20221111-en
2 signatures
150 seconds
General
-
Target
c24bd631affd97a696ef3d057c2f3343.bin
-
Size
64KB
-
MD5
c62578e9bb4369b40e012deb7080f0c4
-
SHA1
ea5cf43187620ceae3297055b313e1a3b76ee4bb
-
SHA256
3dee221c74838c2cefc06728b35c7bdffee66a57eeda52fee68ec2cde209ad79
-
SHA512
7721e1de492e9078d9b0b9aa583704e191465159346ab47b0df4bc756647fadbba7176813313d1f86c94a07273d503c588ca2261a8e479cd012c1f3f2dd283f4
-
SSDEEP
1536:7YmjGr/LqH0vbyeLpr5LlnUgK6WR4ScDp0Wzwpj+d4GTOf:7YZmH0fLhthUgWQ0WzIGT0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/04bba167668fb635dfb00c6e829e5bfbc90920d03678ca00096785fde7d59b89.elf family_gafgyt -
Gafgyt family
Files
-
c24bd631affd97a696ef3d057c2f3343.bin.zip
Password: infected
-
04bba167668fb635dfb00c6e829e5bfbc90920d03678ca00096785fde7d59b89.elf.elf linux arm