Behavioral task
behavioral1
Sample
673cac37538b6876753f1127fcbff6e9d503016594c05968de93e82d4864ba89.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
7386b5bcdfcf19fa99a9be5fec357daa.bin
-
Size
47KB
-
MD5
bf3c5caa6e148ae4aaf9e03572ecd50f
-
SHA1
0123b261e990b2676510b273e6da22f6745efdc2
-
SHA256
52245f22b88c325b5413e4c036d99186c7a81de138c6ec1747a72af85a0643db
-
SHA512
df37bde677d7fde74ed22d29a77e2d3cd0a30c90b0a12a7a1ed3e456da0cc452f348f6ee759252dd9d7f72ff2eafd32442ac28766b74ba3119527e00bceb125a
-
SSDEEP
768:bpq0uOOwNbafLko7o06oMfSsZRwygHmqsBkjiA3BA/rbPkY9YLXG6MYKHpgTRNJc:bET6NSLko7MJSsoyZqsBk2AGLiAYs+Jc
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/673cac37538b6876753f1127fcbff6e9d503016594c05968de93e82d4864ba89.elf family_gafgyt -
Gafgyt family
Files
-
7386b5bcdfcf19fa99a9be5fec357daa.bin.zip
Password: infected
-
673cac37538b6876753f1127fcbff6e9d503016594c05968de93e82d4864ba89.elf.elf linux arm