Behavioral task
behavioral1
Sample
1fa3803a958d4ecfd66c6c182d98f99e3870fdbe36ce25ffb0bbc055cee80f4a.elf
Resource
debian9-armhf-20221125-en
0 signatures
150 seconds
General
-
Target
4d9ee0efe29b2b23b6e4dd7677712ed7.bin
-
Size
43KB
-
MD5
1a1b43e9e9cda3cf394bea7696082096
-
SHA1
a827deae9cff260568dd1a0df89f9ef218870053
-
SHA256
564ec90e1228536d53f37e78c4b393056dd4dee1752e54d116875ddd197c6784
-
SHA512
039140f5de0bb60e5451ae41426e936aa59ddcd0613a4669417c0a85550613ea87b7286abffda70dc69da03c30f70efe78bbdaed5120f1f14fe4dbbe60ad3d74
-
SSDEEP
768:v2AuVAyALFXPh74pHUiXLlj2uUNCVHqnfBFgJrpikcOOND1Q:cvARoh2sKsrpPc1y
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.13.119.116:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1fa3803a958d4ecfd66c6c182d98f99e3870fdbe36ce25ffb0bbc055cee80f4a.elf family_gafgyt -
Gafgyt family
Files
-
4d9ee0efe29b2b23b6e4dd7677712ed7.bin.zip
Password: infected
-
1fa3803a958d4ecfd66c6c182d98f99e3870fdbe36ce25ffb0bbc055cee80f4a.elf.elf linux arm