Behavioral task
behavioral1
Sample
e64fbcb435cbf07ec795709b7d3804dfb48bddec4e936aa312843849ed4300d0.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
176bb6f0414a991522f2aa70febbf323.bin
-
Size
40KB
-
MD5
b6c6cb7972fe070e35511a130c14c419
-
SHA1
0b66f28fabe46edd54bb4fb315d446ea8faab5ca
-
SHA256
74e2ceb9f1dec1eb0b75f607f92154b3344826c439adb3ca5684ac21a93f6b7d
-
SHA512
6d4e22d986b4180caa772138d452559492b6913537582041c026cc04087c9eff50f371f88f78a807d9a6399a4cea2ef716775f43a1945324c63195f3bfd55368
-
SSDEEP
768:APpws2UxjzrB3l81EAk/iQXPAqqDNF3VLtUrCx69b8CttZS/fjT+JTNA8e:APpws2UxjnBaEAkvIdtitbbtZgfOJJAJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
51.68.165.13:1111
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e64fbcb435cbf07ec795709b7d3804dfb48bddec4e936aa312843849ed4300d0.elf family_gafgyt -
Gafgyt family
Files
-
176bb6f0414a991522f2aa70febbf323.bin.zip
Password: infected
-
e64fbcb435cbf07ec795709b7d3804dfb48bddec4e936aa312843849ed4300d0.elf.elf linux arm