Behavioral task
behavioral1
Sample
276cd734d3903733a027c6309c63ad7f795e78b627fc9489246e00053ac5cbef.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
f873caf50833452b3df0bc8e9067f190.bin
-
Size
64KB
-
MD5
804af35a467ae5683502f34ea71df244
-
SHA1
ab81b3f49197310d6096b544ee537985a5718666
-
SHA256
139de8d4dc4da15219131e4217feb503535b67cbdc3636ea816c72643f864e8b
-
SHA512
e679a9d62969fbbdb808e50f99cf64abade202d7c43ff39789c0cfadc8c730ec5ffb66fa1ed3c769aab854a2e96aac00e5be034da576e035ae4b8803c3740b14
-
SSDEEP
1536:oZ64aIrcJteL0naW9ZLeEbL1c1YTaSoWaoJ+ATNqKkVmuaJ:uP6oL0aWttFuSob7ATNqnYuaJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
176.111.173.27:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/276cd734d3903733a027c6309c63ad7f795e78b627fc9489246e00053ac5cbef.elf family_gafgyt -
Gafgyt family
Files
-
f873caf50833452b3df0bc8e9067f190.bin.zip
Password: infected
-
276cd734d3903733a027c6309c63ad7f795e78b627fc9489246e00053ac5cbef.elf.elf linux arm