Behavioral task
behavioral1
Sample
7b74e0c4ec79aaf451d706c31cc3d23a73c5e3574cd916c841334e138a79c293.elf
Resource
debian9-armhf-20221125-en
2 signatures
150 seconds
General
-
Target
987c4e2c519419bb90cd1582ca559332.bin
-
Size
67KB
-
MD5
a7686a36dbb8b1c22df04f194bc68414
-
SHA1
c478e6f5fed3bbb6cc8ecf8976534280eed053d5
-
SHA256
7b774b2d0d10edaea09711eaa17d42b02e844df69e56612da53e554a30f00002
-
SHA512
bf40c5fc9cea8b438caf7e0497b305dd531609dbae0d4d7cb52cc7dcceb39460fb6eddd206463c125727888e0d08fa90f91b1773ef6f8745bc586532374ba6b9
-
SSDEEP
1536:S89jpocbGZ9Rp+RswIala165dmsG6jSII3450bDWuHVVEj3:SiDbe9RjwBlaU5dmb6jSngcwj3
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.13.119.116:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7b74e0c4ec79aaf451d706c31cc3d23a73c5e3574cd916c841334e138a79c293.elf family_gafgyt -
Gafgyt family
Files
-
987c4e2c519419bb90cd1582ca559332.bin.zip
Password: infected
-
7b74e0c4ec79aaf451d706c31cc3d23a73c5e3574cd916c841334e138a79c293.elf.elf linux arm