Behavioral task
behavioral1
Sample
55763357d962bfcf39f59658fe3200ed7d1cd5ff81c5ec8df0cf5272a76f2796.elf
Resource
debian9-mipsbe-20221125-en
5 signatures
150 seconds
General
-
Target
392e82d183580b68874c810823db0663.bin
-
Size
52KB
-
MD5
11a10f5183b159ed1cd70bec97f3fecb
-
SHA1
1c8b358107663698fb0301c2b69c1727b584664c
-
SHA256
bd20cada23b8c2826e1d648a4378e50431b861ab0417d062289f668d0bd038a1
-
SHA512
a3f8d33e66287867e0f897ad1b4eca8a7e0e2f821c78c6080e8ce1c4fb697086a5c9693a6665e2a018e37bc00f73d28dfc46f6fdbb4dcd4dc194d70191e37068
-
SSDEEP
1536:YTAV2Xa0yhNc4lWkgiXSH1cmj0gDg1eRdq9XqDDi:dV2zyPkiXK9jWSdqmDi
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.234.99.218:71
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/55763357d962bfcf39f59658fe3200ed7d1cd5ff81c5ec8df0cf5272a76f2796.elf family_gafgyt -
Gafgyt family
Files
-
392e82d183580b68874c810823db0663.bin.zip
Password: infected
-
55763357d962bfcf39f59658fe3200ed7d1cd5ff81c5ec8df0cf5272a76f2796.elf.elf linux mipsbe