Behavioral task
behavioral1
Sample
8a7e329b13e63bd93d891e29400616655575b43abbb04c4d04b6b2984479f51c.elf
Resource
debian9-mipsel-en-20211208
2 signatures
150 seconds
General
-
Target
8fc978543762e1a1e2843973cbea36c9.bin
-
Size
42KB
-
MD5
3d2a1d6ff9c686884305cef7e5c0f4fa
-
SHA1
4cc7dd2b573db330a50544365b06e90a1276e028
-
SHA256
7d163c2f8aae788f64fbdad085d0a264a5949ae248f9652ed7a67c39f2bc72d5
-
SHA512
11f391d7cea7afad8d8ca52ee775f4bcf2064a06c029196a119408fea31f87ba3611440838c07edcf2b38ddfac734c3847792445f80912eb8ba30790dcb84c71
-
SSDEEP
768:vaH9QKH3pY+DCJNGVmPBRlSzkZXfHIV1NwfjSbQeVqO8GiVl2a:vaH9QwZj+JTPlSzkNAifjSbXqO8GiSa
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.181.80.141:351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8a7e329b13e63bd93d891e29400616655575b43abbb04c4d04b6b2984479f51c.elf family_gafgyt -
Gafgyt family
Files
-
8fc978543762e1a1e2843973cbea36c9.bin.zip
Password: infected
-
8a7e329b13e63bd93d891e29400616655575b43abbb04c4d04b6b2984479f51c.elf.elf linux mipsel