Behavioral task
behavioral1
Sample
NEAS.NEAS66905502163c56e099aeba148c130e21f6dc666d099365cba01348c87126aa31elfelf_JC.elf
Resource
debian9-armhf-en-20211208
debian-9-armhf
2 signatures
150 seconds
General
-
Target
NEAS.NEAS66905502163c56e099aeba148c130e21f6dc666d099365cba01348c87126aa31elfelf_JC.elf
-
Size
146KB
-
MD5
b05384f4df810485f7869218af37c9f6
-
SHA1
b568bd6791f1ec9b2b6001fcdbf8a3466edcc07e
-
SHA256
66905502163c56e099aeba148c130e21f6dc666d099365cba01348c87126aa31
-
SHA512
03cfa15962c38d97c01d8d8fc05464a06bd08cb915e129426132453d7e224e73f2ac13424be00443921f4d4d41daa9d238a4797f5c7b384101d358e4243a7148
-
SSDEEP
3072:ut8iFDKEfFN+Fa+1sWFh7n1erM/9pUMbmQwfCMQiGW:s8iFDLf/+FaN0h7nsrM/9p5mQwfCDiGW
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
79.110.48.116:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
NEAS.NEAS66905502163c56e099aeba148c130e21f6dc666d099365cba01348c87126aa31elfelf_JC.elf.elf linux arm