Behavioral task
behavioral1
Sample
3e4517ddcc484746028b151ab1534ed2e52e4eb9bc0f2128b03a9fb8008602dc.elf
Resource
debian9-armhf-20221125-en
0 signatures
150 seconds
General
-
Target
720e78daf3dbbc7d9772bdf74e230ce5.bin
-
Size
50KB
-
MD5
a09cf99d63343429631fe7e31b21c01b
-
SHA1
ae91fd74773d26fbc90e337d12145c6475d05b6e
-
SHA256
65517bea5223be378deb1197325ea01d40eac49cac44c1b6d5e6304512901fc0
-
SHA512
e887a8dcc72ebe10168df714580285b4b86c186d4e88f4333e06dbc80c552a63bf399a231ef2b0b6dede7ea05ab3519cb2366c3fad04c930747f8452b15e84b5
-
SSDEEP
1536:ZCwdRMYcDL0/S07xm5Ie8JaKDrv+xvQ3tFin7:IwPw39kmQRexvA6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
198.98.62.168:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3e4517ddcc484746028b151ab1534ed2e52e4eb9bc0f2128b03a9fb8008602dc.elf family_gafgyt -
Gafgyt family
Files
-
720e78daf3dbbc7d9772bdf74e230ce5.bin.zip
Password: infected
-
3e4517ddcc484746028b151ab1534ed2e52e4eb9bc0f2128b03a9fb8008602dc.elf.elf linux arm