Behavioral task
behavioral1
Sample
bcf6454ddb0c495f8dd6956ba6888c2769c5d21ade63d653ce32ca3261bfadeb.elf
Resource
debian9-armhf-20221111-en
0 signatures
150 seconds
General
-
Target
e49fce7d1274484db2bae3ab1caac366.bin
-
Size
64KB
-
MD5
85454edef8acd9ad237b44538595cd6e
-
SHA1
791abd46e6abe7ba31a24e5458a4a82f6fdac12b
-
SHA256
710f13a97898340d0e2ed0c5c83e017b06658b905e39094c177e5219f89087b7
-
SHA512
a8710770c4edb748c21bd46596381bf49f6f2c9a47767bcde512c01dc1a943d76b913bb98fe4d9f9ae0375c8be0da8e5a47e96703b36168b80f259c668e652ec
-
SSDEEP
1536:Pwa1TrsdHU1KjtKQNYq7sHDvVukxjwQagkKgNYl8FgdTh15:Ya9UsQWvukvNGY0gdV
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.57.122.129:8889
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bcf6454ddb0c495f8dd6956ba6888c2769c5d21ade63d653ce32ca3261bfadeb.elf family_gafgyt -
Gafgyt family
Files
-
e49fce7d1274484db2bae3ab1caac366.bin.zip
Password: infected
-
bcf6454ddb0c495f8dd6956ba6888c2769c5d21ade63d653ce32ca3261bfadeb.elf.elf linux arm