Behavioral task
behavioral1
Sample
35e1beeade1ac1afcbe75b64a08796456cbd7bdce8ecf5bd817cf3e81a5bab0b.elf
Resource
debian9-armhf-20231026-en
2 signatures
150 seconds
General
-
Target
36a0bb87f0abfc58e47ce70dc13925b5.bin
-
Size
51KB
-
MD5
b890971e98258a125b626f82b761fe59
-
SHA1
a5bb9eff02103a983651575473b6fa72c1ae154b
-
SHA256
701520294f2ee96ca6821dfe03507a659d41e1cd5caca127a62353af36c665c6
-
SHA512
6c2e024a932d7ecb481b6b41124b28a29b01f0d6271138b45f9bbe4f5537910ecf10520d2fbde7f9a1d490c342f02f6efa668138a2a8617977ddcf4141eb5b3a
-
SSDEEP
768:sARtZyFUDb9CIAurM7QiFHWpXZQn78q51yJ1Xl0o2Ht1BpSc:tv9C4W7FHW3Q7haJ1VD8yc
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/35e1beeade1ac1afcbe75b64a08796456cbd7bdce8ecf5bd817cf3e81a5bab0b.elf family_gafgyt -
Gafgyt family
Files
-
36a0bb87f0abfc58e47ce70dc13925b5.bin.zip
Password: infected
-
35e1beeade1ac1afcbe75b64a08796456cbd7bdce8ecf5bd817cf3e81a5bab0b.elf.elf linux arm