Behavioral task
behavioral1
Sample
9466dbcc980cb8029e8d007ecb3d462def505d0487a004661bd7405895a3fd93.elf
Resource
debian9-mipsbe-en-20211208
2 signatures
150 seconds
General
-
Target
d0c6ef6e6418c6861283b5592aef4432.bin
-
Size
48KB
-
MD5
7c3ef8a914bc05f8616397ee926f7250
-
SHA1
d7bf561faeb85d10621e5f545a191b8d3699f32e
-
SHA256
ed586f2db8a919a441d62459ad639118cee411e2a4e17bdc49da76073da6be7a
-
SHA512
b64130bfb651b19a384b53a2e4811cd86a661eeb98067fcfe28d6af10c9160972ab4ac1f2356f6bb9cb069d6a6801f8acf706d5eea58a7898f803558c0849304
-
SSDEEP
768:GNN1mDT1yf7rnNFhdQ14KHhrVSiOa2NGb1mqT7kXd0sWg+mxicmF2:G/1AIjrIPhrVaBqTWde8sxF2
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.88.66.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9466dbcc980cb8029e8d007ecb3d462def505d0487a004661bd7405895a3fd93.elf family_gafgyt -
Gafgyt family
Files
-
d0c6ef6e6418c6861283b5592aef4432.bin.zip
Password: infected
-
9466dbcc980cb8029e8d007ecb3d462def505d0487a004661bd7405895a3fd93.elf.elf linux mipsbe