Behavioral task
behavioral1
Sample
6604e6ee7466c466d08dba5f1576139ecf2ccf0a66a09ad6f55da38ed935955f.elf
Resource
debian9-armhf-20221125-en
0 signatures
150 seconds
General
-
Target
4aeac28ccd7c0be2061bdf89d4795fa0.bin
-
Size
41KB
-
MD5
2c186ed5ed683cd50fc25d16fcb2dcbe
-
SHA1
18e5779bc67c83607e60d5b454b12aec5281f055
-
SHA256
983345a18accf81e41712da3630e4fc33a76ffb0c541ec07727c2f0aaff7b21a
-
SHA512
fadee1fe0d898ae5d0f008c033b095a10a265e1761956c5dcae310e0677ed2d357d31e47f1867d2a951c09106bef5e7d68517b5bc9ab80043426ab71bae98ed9
-
SSDEEP
768:zatAsp9uGLvNoSR+ERXKPf2MFRIrvBVX2QGTiXk+tQj6CfdxyOb:OHDZLloSR/RXEf2MFwXXGTl+y3d0Ob
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.13.119.116:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6604e6ee7466c466d08dba5f1576139ecf2ccf0a66a09ad6f55da38ed935955f.elf family_gafgyt -
Gafgyt family
Files
-
4aeac28ccd7c0be2061bdf89d4795fa0.bin.zip
Password: infected
-
6604e6ee7466c466d08dba5f1576139ecf2ccf0a66a09ad6f55da38ed935955f.elf.elf linux arm