Behavioral task
behavioral1
Sample
8dcda1bcfc5f3d5b57a7a46f8953c49dfa6077c54a070897421b3569431e1a02.elf
Resource
debian9-armhf-20221125-en
debian-9-armhf
0 signatures
150 seconds
General
-
Target
383dc37f2f5487126f69e811f595d453.bin
-
Size
41KB
-
MD5
564ec228683ebd543221e8a07561d1d8
-
SHA1
41a68eb153afc721b745da297059d8caf50b5b04
-
SHA256
6bf1584244ac4beb7ca664a237beacd38261a14de5656867275c64d554937613
-
SHA512
9d752c0e2ff1c4417f6e260595956195fe89043017d031d0630c8019e953970826f90984b3e5c047d7385bc48bd1bc75ac3cd5392e556f5f338eba5d1f30217e
-
SSDEEP
768:48Mk8cAyltfzCKR6iF8eu6uFY30JZglpJ4qCkkNrnxlEm6bAsknEY:4bkQKtfzH6iFrug1J4qnkhnkmWVY
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
85.204.116.179:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8dcda1bcfc5f3d5b57a7a46f8953c49dfa6077c54a070897421b3569431e1a02.elf family_gafgyt -
Gafgyt family
Files
-
383dc37f2f5487126f69e811f595d453.bin.zip
Password: infected
-
8dcda1bcfc5f3d5b57a7a46f8953c49dfa6077c54a070897421b3569431e1a02.elf.elf linux arm