Behavioral task
behavioral1
Sample
1075b1c6fbb36dbe94c275d43c4037e857187f7d0af3fd600e7194db5bb20f53.elf
Resource
debian9-mipsel-20221125-en
2 signatures
150 seconds
General
-
Target
d7c38dcf486229b9755993f35a0840e0.bin
-
Size
50KB
-
MD5
d1f0f9bbabe1d97d4a764f4552f49995
-
SHA1
051e1c2d39c0142ab1f2c6c01b62acce2fb4fcdd
-
SHA256
fadfeae9d7c1c174cc7baf04658fa0cfe96a9775d51ceb82f870588338dd9e8c
-
SHA512
85ae17ced249cecb6d5fa38f7d0da387ba766c2a9e90957d385e0246548d31797a1d5b784cc041b03bfbd95e092c2570522f77a764d904d40bfbc9ab514b0118
-
SSDEEP
1536:kLhw9rD6FgYxQwVJLBpHYn97oaaXCFJWbRt4pOCfXVuESI:dwF8EBp4n971F6PUNtv
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1075b1c6fbb36dbe94c275d43c4037e857187f7d0af3fd600e7194db5bb20f53.elf family_gafgyt -
Gafgyt family
Files
-
d7c38dcf486229b9755993f35a0840e0.bin.zip
Password: infected
-
1075b1c6fbb36dbe94c275d43c4037e857187f7d0af3fd600e7194db5bb20f53.elf.elf linux mipsel