Behavioral task
behavioral1
Sample
12c2acc79ed66d11d6b7635ef8f26a977ef62d02185aa8090d9c65ee5ca3f624.elf
Resource
debian9-armhf-en-20211208
1 signatures
150 seconds
General
-
Target
8b4f827f1ebca6855840f1fd964671d1.bin
-
Size
57KB
-
MD5
39fb6c7794622d0499807df80aabc13b
-
SHA1
7a40fbc4b708c13b6e18cfafaebf5f51969461b7
-
SHA256
4f4ab5e2f043161b3506ef4903d2aaff9d2ffc2cad212c4c0d73702190c05e7b
-
SHA512
13c8c0f4580aa74b4716f5b94962f169e9f59de7e75132fc16533b9ba2d398a9e8a06bdb76ffadcf376eec507773ff96328c6b9ad16ccfa63dc00c1417351ad2
-
SSDEEP
768:/YlwmdPGclnM7SasJ9A85BNabR1yi6uFZO+wkJcUgQaUdvJgMk5YwoL9Z9EYot0c:AXPGckBsfG1Oi9nqUpPwyZiVt0n0y8z
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/12c2acc79ed66d11d6b7635ef8f26a977ef62d02185aa8090d9c65ee5ca3f624.elf family_gafgyt -
Gafgyt family
Files
-
8b4f827f1ebca6855840f1fd964671d1.bin.zip
Password: infected
-
12c2acc79ed66d11d6b7635ef8f26a977ef62d02185aa8090d9c65ee5ca3f624.elf.elf linux arm