Behavioral task
behavioral1
Sample
m-6.8-k.Fourloko.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
m-6.8-k.Fourloko.elf
-
Size
146KB
-
MD5
b1bca20c6171cc32f2c767215a93d165
-
SHA1
1858f21e9067c427e43d98d6b37bd78d2fc8e216
-
SHA256
640c3d2a72f210b142708e9736720f021308f5566a8177caf44fbdc2bd034286
-
SHA512
02122629a793d0141b2c38395893f9db9ae620aa3075ecb3fc9fe178382bec4f0fcca293ca86f0440e3ca273fc91e427db23ffe8b210b1d7bd3540e44a480537
-
SSDEEP
3072:bBnEaZUpFYZ6qAllzRohWinnFEM/9WKmpwfvRQfZn:blEaZUpFYsqwRoYinneM/9HmpwfvafZn
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
149.100.154.55:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
m-6.8-k.Fourloko.elf.elf linux arm