Behavioral task
behavioral1
Sample
e27920745c841c5fde99c77e832e959c.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
e27920745c841c5fde99c77e832e959c.elf
-
Size
118KB
-
MD5
e27920745c841c5fde99c77e832e959c
-
SHA1
b2704d1cd112643c6eb3071f04122b54e6c63051
-
SHA256
6e97579d97dcfce0ef1990902da225a60686305a70226811b077491009cabe33
-
SHA512
71a5f17d36183edf8c5822cf203386b41fd6d35c972ca12367f6e3231835c961b78981077843adbe209b142d385d64feca60d98669eb6d96c2bc226d0ee61016
-
SSDEEP
3072:ekYPUfsgnsb0J2ag/VfxkDY9Ho+mTQOY5NX3cn:9YPUfsgEo2a0xkDoI+mTQOY5R3cn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.78.92.158:10024
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
e27920745c841c5fde99c77e832e959c.elf.elf linux arm