Behavioral task
behavioral1
Sample
2c35d0bc456774abfa3e173d4537654ee268773c7f3379d46b8e5a8e0642a736.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
079fe23f64b63804dedbc6699a577d62.bin
-
Size
47KB
-
MD5
ba1e8e1551b4334bdc57b7d736a126ef
-
SHA1
123b2ea270cf0caf9e041d0ab4fc9028ab1eed74
-
SHA256
2c7fc1f4a26c974d7dbfdc5cccfd1548055a6f300b9b81188083a38f85389051
-
SHA512
9065fed8b6d3bd39c88de45f2783be5dc0082edb3693fe6322590911db9a6a76c9d8fa713030f8892c4bb8f572331ae2369552912158faaa85e9b79d1976388b
-
SSDEEP
768:i50gpHpsLJECz+LxoFE8iWj95lWfNSt22KVWb2IftVaR3vH0azKaThriFhrbGPAK:iicmECzi2FxDjmw8WXaxVlGvHWGNsow
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
176.111.173.27:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2c35d0bc456774abfa3e173d4537654ee268773c7f3379d46b8e5a8e0642a736.elf family_gafgyt -
Gafgyt family
Files
-
079fe23f64b63804dedbc6699a577d62.bin.zip
Password: infected
-
2c35d0bc456774abfa3e173d4537654ee268773c7f3379d46b8e5a8e0642a736.elf.elf linux arm