Behavioral task
behavioral1
Sample
9e54877c21acb33f164964c54cfb10a0485e700a22812472b05493f1e31e2c75.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
2fbdce5623bf6ff34811d8e6aa6953d0.bin
-
Size
51KB
-
MD5
f4802ee50b5bbb5b2d282517cc51092f
-
SHA1
f4fd6b2415ffcf1a845b16d44f35da976ad7c38f
-
SHA256
953b9d79eb86a9664fcb5b29b36966e1b12193b9e8563f2365a68ff58a8c5ec1
-
SHA512
16f5b9de20dcc0d72b4a464051a82cbb5e1b430b08f98a7a36f91d068e076e0ce379c09de6bf9c2641dad3e5a8bd05fb15eb074cd6e33ca75b6796160238881c
-
SSDEEP
1536:v+Yv5C+oZ7QOUARdUGDpEH7+DZSLm72biztiCSyO/:Gy52iARdOiDZcm72bizt4j
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.212:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9e54877c21acb33f164964c54cfb10a0485e700a22812472b05493f1e31e2c75.elf family_gafgyt -
Gafgyt family
Files
-
2fbdce5623bf6ff34811d8e6aa6953d0.bin.zip
Password: infected
-
9e54877c21acb33f164964c54cfb10a0485e700a22812472b05493f1e31e2c75.elf.elf linux arm