Behavioral task
behavioral1
Sample
29353bccccaf0eb5cb4d501fc9fdb5d9175315a58ded622f19df838dd220655b.elf
Resource
debian9-armhf-en-20211208
0 signatures
150 seconds
General
-
Target
445355d38921f69166e46c2ffecc2b37.bin
-
Size
41KB
-
MD5
48733ee0814eb827414548a722297634
-
SHA1
72591d80c9664c821756020dd59e4ac6f35df0bd
-
SHA256
14296f80ef7723dd4eefb41310249d3b0f7366beaad1839be1356ff4d19a22ec
-
SHA512
7b233ebc020e8951d1cfdc47fb4bd5cd8811bb802b3a0528200e285843c096b210009e57fe9ba0aa5dd6e832b521bf3504eac882d0295d0e32662f7f167c5086
-
SSDEEP
768:+xBgqNXNib9myN6t31ilCkYldMA/X7hqeptrkXj4NtaP6ReGNGwqn7i2qqEOd:+DgqNdA9mywtM6/X7hL0j2R1gwU3qqEM
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.181.80.141:351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/29353bccccaf0eb5cb4d501fc9fdb5d9175315a58ded622f19df838dd220655b.elf family_gafgyt -
Gafgyt family
Files
-
445355d38921f69166e46c2ffecc2b37.bin.zip
Password: infected
-
29353bccccaf0eb5cb4d501fc9fdb5d9175315a58ded622f19df838dd220655b.elf.elf linux arm