Behavioral task
behavioral1
Sample
c43ea6f88ae9492a27e4a42d380af43b75393ddce1fd1a0615d55a8844cb72ee.elf
Resource
debian9-mipsel-20221111-en
2 signatures
150 seconds
General
-
Target
f1ecafe9f46e71368b0436efd84a7f88.bin
-
Size
42KB
-
MD5
06851295cab94abe9b3bb7b6de642704
-
SHA1
884697ca5514a354236d897cb43515e9f3a1c185
-
SHA256
a59f849e083de44298346eaa9c59af689743e98248ae6a38ad47c0ee9966d84b
-
SHA512
4ddf23a833aa98cb2cbfb7cf1ba42cac064646e78b5c96277b5513e78b5643c7e721f35344c66021c74417099fd9cb8625a4eb7a9af9a84c04af1defa3f14ced
-
SSDEEP
768:6HtJXq3WxEbhUwsAiJZx+p4bUYVOHVN9SDNgK1aPwBunetb4cAzrGNWsDgMRbZ:6H366E+/ZTFVQVN2gMgejA2NWshbZ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
193.35.18.212:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/c43ea6f88ae9492a27e4a42d380af43b75393ddce1fd1a0615d55a8844cb72ee.elf family_gafgyt -
Gafgyt family
Files
-
f1ecafe9f46e71368b0436efd84a7f88.bin.zip
Password: infected
-
c43ea6f88ae9492a27e4a42d380af43b75393ddce1fd1a0615d55a8844cb72ee.elf.elf linux mipsel