Behavioral task
behavioral1
Sample
7745c1363b18ba8c0c4309a5ac7feb3438976a7bc6f0f80cdeb0edd2e809006a.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
92d01a5c4007dcd0fee6725d1c25d325.bin
-
Size
41KB
-
MD5
f4e8adba406a9a362751c17026f2201d
-
SHA1
17baf92d34dd1a58f3c336dc8cab5a8a65da9fc8
-
SHA256
3105fea986c1eb43b2f822d133744a1bad8280eaecd30f4383003256508cedf8
-
SHA512
77d50cbbf3e988429a7858c1b0e64ecdd64722b04c48d1f15d87b94961b7789bd345029544fbd4b549e8da74adde711c7dbcaddb60e99f7144c1648685300708
-
SSDEEP
768:1h3Qztfq+gscgCQmTEyB9Ky+MBooMNVMgehUb3s48VstamyP7lNE:1hydqfgCLEyUCooQbcssjNE
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.212:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7745c1363b18ba8c0c4309a5ac7feb3438976a7bc6f0f80cdeb0edd2e809006a.elf family_gafgyt -
Gafgyt family
Files
-
92d01a5c4007dcd0fee6725d1c25d325.bin.zip
Password: infected
-
7745c1363b18ba8c0c4309a5ac7feb3438976a7bc6f0f80cdeb0edd2e809006a.elf.elf linux arm