Behavioral task
behavioral1
Sample
1b5bfa46d7b8daccef6daa5191f63b74f492dc27e0eb5e42a57c8bb25da43d99.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
b6d9bc5bdb1ce4219006b8f0075ee007.bin
-
Size
44KB
-
MD5
2c5b2222631b06b9f9fdf428e34a466a
-
SHA1
4aff4c5f9ddcb5250c7c73287e985cb3ad29965f
-
SHA256
028450827201d3339f6b2a0d010ca0b93343cb48be4ff805ebde29e1a5f34e1a
-
SHA512
850063aec65a9f8774e22616c146bb5c32606d4ee4a3086810c61c9c9ae515f465059dc0c0add606217c48baf652012c0a65278946f732f56e2327084e4cac15
-
SSDEEP
768:ic7m47BmQf+lJoHT/0NfbY0UU8td1lUpMclupDrgvZdYuFfyzI:ism4AcEGHWDlCtdLUplvYzI
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.212:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1b5bfa46d7b8daccef6daa5191f63b74f492dc27e0eb5e42a57c8bb25da43d99.elf family_gafgyt -
Gafgyt family
Files
-
b6d9bc5bdb1ce4219006b8f0075ee007.bin.zip
Password: infected
-
1b5bfa46d7b8daccef6daa5191f63b74f492dc27e0eb5e42a57c8bb25da43d99.elf.elf linux arm