Behavioral task
behavioral1
Sample
633cdd39c6568bb6285cb1d18e184290558947013a7bba4b6be8ca999ba4d074.elf
Resource
debian9-mipsel-20221111-en
2 signatures
150 seconds
General
-
Target
24727a55266ee8f79e16d00454c7c701.bin
-
Size
42KB
-
MD5
9f32b30c9b11965306bfb27734e4afe5
-
SHA1
5bdca41131bfd3e6e76bc8cc3a0a558cc81fe341
-
SHA256
364b5c55ef66bd9502e90fb81d5e696ac97c3872ed10deb1b517dbb07d207992
-
SHA512
17c65cc598637392ae8e3894239584cde038bfedee8265eb22afff42c08a11e9202d376d9505f37e851d00eff29b5ed58f6cb090a0fdf1ad77455275a1acc6f1
-
SSDEEP
768:BqHqbb6rsjlkJ3J1T+YmNnh5YxioNX2vL3x91khc1+wWNHDlaptA5a:B/begJ4+Pxho92Lz1ku1j2DlX5a
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.13.119.116:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/633cdd39c6568bb6285cb1d18e184290558947013a7bba4b6be8ca999ba4d074.elf family_gafgyt -
Gafgyt family
Files
-
24727a55266ee8f79e16d00454c7c701.bin.zip
Password: infected
-
633cdd39c6568bb6285cb1d18e184290558947013a7bba4b6be8ca999ba4d074.elf.elf linux mipsel