Behavioral task
behavioral1
Sample
afa270975a8d531fd2c68e30fd41e28b75f2badf259387fa68d4d71e080b4f89.elf
Resource
debian9-mipsel-en-20211208
2 signatures
150 seconds
General
-
Target
e6a5a9ec96b1c2419d49623781c46da2.bin
-
Size
42KB
-
MD5
cba04cac07f2cf1d4071aea2699ac1c0
-
SHA1
f27a8d9fe0128a982de16337485ffb9aa83cb848
-
SHA256
218a18cc1d31eabf9d07e333e7fff3cc6fbeb43f7a7bf7a3553fcf3a95411b77
-
SHA512
cbc1e33e38510e48738fbac180fe8ef8227203de6407e284dd1a7051f423d57aa1822a9d91697934e803b37bf38ec4f2ef277a0813e2a8e14c0075c04b615ede
-
SSDEEP
768:1XZx0/eJC1bpy3KxDagL8JK3qOz5vQb8CyKO8cXE:1XZEeJCb+K9L8I/z54bzbaXE
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
85.204.116.179:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/afa270975a8d531fd2c68e30fd41e28b75f2badf259387fa68d4d71e080b4f89.elf family_gafgyt -
Gafgyt family
Files
-
e6a5a9ec96b1c2419d49623781c46da2.bin.zip
Password: infected
-
afa270975a8d531fd2c68e30fd41e28b75f2badf259387fa68d4d71e080b4f89.elf.elf linux mipsel