Behavioral task
behavioral1
Sample
a30ead54eab2365926088290fb64f6144dcdc97d981faf4d0319565e225dddeb.elf
Resource
debian9-armhf-en-20211208
2 signatures
150 seconds
General
-
Target
b370144e0802c827c5b9fa5ad8cd7e64.bin
-
Size
67KB
-
MD5
155624a55ad13520c78aa874ec32b249
-
SHA1
490c58c3f07b873a5a10e6887a02cfb05645ff21
-
SHA256
324af054209324f19f85b8b940adcd666b8c3e92ea5e3e59a51940b39047970d
-
SHA512
c7dcf285896446c088b6286ab6343da32cfcee78db6c92e3fa78b4c2a8394f1ae30841abbe119a6ecda8089e58ce19fec4dd871eebdceb32c59a08c620467ed9
-
SSDEEP
1536:feUAwtNVNRoyvrTe9MEM29bi6GW8OUCGFWImpu:WUAwDhzTE9bV8OaoG
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.212:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a30ead54eab2365926088290fb64f6144dcdc97d981faf4d0319565e225dddeb.elf family_gafgyt -
Gafgyt family
Files
-
b370144e0802c827c5b9fa5ad8cd7e64.bin.zip
Password: infected
-
a30ead54eab2365926088290fb64f6144dcdc97d981faf4d0319565e225dddeb.elf.elf linux arm