Behavioral task
behavioral1
Sample
8b9f71516a2bb0c02f8e94ec112f039831518f6f26af8817abd963ba23ec8b7a.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
9266ce1f9d3291b03d78d9338a37396d.bin
-
Size
50KB
-
MD5
b64d4f4ba36a04a69a207ff094685282
-
SHA1
66f6b4e9d26bfcc419665e49c93ca62c0cd7e6f4
-
SHA256
2348cadd6a11c7b91e8a1ca2321dc3821f6254080fe0d2908f61696d39796c45
-
SHA512
a82c05482d5e5efe63c3a4eb37673b2450ea8c0ce8047ecdb30b6a8246e09b8f878508ecdecccc4fcc81dd80a650e6a0110a11223653d0cf64a15873b5b38670
-
SSDEEP
768:+EibzUPc1gZE00P7FzPEa/jjwfzqTYUajlVSSqdC6AUKFA+/8W2FLDIYqtNV1DuP:7OF8aYrqTY2SetKFw90rnXDA
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
51.68.165.13:1111
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8b9f71516a2bb0c02f8e94ec112f039831518f6f26af8817abd963ba23ec8b7a.elf family_gafgyt -
Gafgyt family
Files
-
9266ce1f9d3291b03d78d9338a37396d.bin.zip
Password: infected
-
8b9f71516a2bb0c02f8e94ec112f039831518f6f26af8817abd963ba23ec8b7a.elf.elf linux arm