Behavioral task
behavioral1
Sample
1fb107eae74424af3c0cda446da3f2071265722a120f77a314b672485d6cfee8.elf
Resource
debian9-mipsel-en-20211208
1 signatures
150 seconds
General
-
Target
d67c30d90419239cfdc670205ae0f30d.bin
-
Size
48KB
-
MD5
fe653dfdbdc407267b4a8f9176714b97
-
SHA1
fc9bbd741b3688e78305d6aefd29b2c05e584711
-
SHA256
16daf000030c80f78583cfa1dfce56f8c89cbec69f93e517079c1bd3a5d820b5
-
SHA512
67c7a909f58b73b190f203479976e51635fc5e0f5ba7da57a6a3193ae3a8849cb1d24102541dff44158366e5319d0dd8e3707a507b13a813e0885172485d8fff
-
SSDEEP
768:MLvWvgkxREFh23q5owvksBy03coPgHBE9mLK1oj9P/TV/ww2+PaOpuX:MLOYkvGI3q5BtBvsonmXL5PjySuX
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
139.177.202.27:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1fb107eae74424af3c0cda446da3f2071265722a120f77a314b672485d6cfee8.elf family_gafgyt -
Gafgyt family
Files
-
d67c30d90419239cfdc670205ae0f30d.bin.zip
Password: infected
-
1fb107eae74424af3c0cda446da3f2071265722a120f77a314b672485d6cfee8.elf.elf linux mipsel