Behavioral task
behavioral1
Sample
NEAS.NEASc7d76c6eaf1e9c070d5056456dbe4c0045849755d5b21780b069601a6587388eelfelf_JC.elf
Resource
debian9-armhf-20230831-en
2 signatures
150 seconds
General
-
Target
NEAS.NEASc7d76c6eaf1e9c070d5056456dbe4c0045849755d5b21780b069601a6587388eelfelf_JC.elf
-
Size
146KB
-
MD5
1f16e78d5eef8d8e7cfb910b2107588c
-
SHA1
866d35749915f25f400b3440cb90171d6a76581c
-
SHA256
c7d76c6eaf1e9c070d5056456dbe4c0045849755d5b21780b069601a6587388e
-
SHA512
04a826f29aa50077accdf2b5a8703314b08686cc3e16713872296d16579b6597525b8101958e869d24deb8dc3c087d1d7cf56e13c0b445ae97880a056f41facc
-
SSDEEP
3072:it8iFDKEfFN+Fa+1sWFh7rz0JH/WbUMbmQwfCMQiGW:g8iFDLf/+FaN0h7rz0JH/Wb5mQwfCDi9
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
79.110.48.116:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
NEAS.NEASc7d76c6eaf1e9c070d5056456dbe4c0045849755d5b21780b069601a6587388eelfelf_JC.elf.elf linux arm