Behavioral task
behavioral1
Sample
e72628daaeed652f2e26e52d439f2734ce5d0b0fa62358cb551efcba6b2a8c7f.elf
Resource
debian9-armhf-20221111-en
0 signatures
150 seconds
General
-
Target
9ddd4597c7767d3c98d5116e5653872d.bin
-
Size
44KB
-
MD5
928ceeb6d1b5ccca8eb3ef19038f320e
-
SHA1
000ca60b2f449fec367f8cd7f4b2fed9d7bf0d01
-
SHA256
1f2828d4f48bc563fe2fce3ad06312291ccbda435e46fb653cceffeb4799372b
-
SHA512
47da5dac38c035045044783f1dc926f1187a1c7f661054c16aeff0f353846d1d5f32fdd97b8648254db60fd9880a120ec88a169ec22323a296f9aba40b147275
-
SSDEEP
768:hltHHaHz/lhzIRhNORyferGK9hzgG6m1qICoq8WUyaCFHkbeKPj:JaphERhGymrh5ZeQ9WUB0ky6j
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.181.80.141:351
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e72628daaeed652f2e26e52d439f2734ce5d0b0fa62358cb551efcba6b2a8c7f.elf family_gafgyt -
Gafgyt family
Files
-
9ddd4597c7767d3c98d5116e5653872d.bin.zip
Password: infected
-
e72628daaeed652f2e26e52d439f2734ce5d0b0fa62358cb551efcba6b2a8c7f.elf.elf linux arm