Behavioral task
behavioral1
Sample
6f4f06fae7095c29fe8b0b487d19dc534bfc1121bda783595467d16de29d3c06.elf
Resource
debian9-mipsbe-20231026-en
2 signatures
150 seconds
General
-
Target
090d65ee718715c4ed64819b2715dafe.bin
-
Size
42KB
-
MD5
1b7c03737f669bbb789b1452c65dccf1
-
SHA1
6027f0b9c48b88e0e67fe7cc3f8c546be7ac0e7c
-
SHA256
819af4a8cd56f55ff9e7b26dd21155e5a61a948d28aa7f2506f6968ba0e62e56
-
SHA512
a274494dddbafce4305fec68be92da72a31b9bb0f6706db7a03276106efdb81e03e575d96f5cebe4fd8fed115c7400359c60a254fdca4c9288fcba7f92367685
-
SSDEEP
768:LhS6hKDEfS2FfTpGpAkO2zJjGb9U1s00GiUjc7nfWvsFaOi/3qRHQy:9S6hb62RpSAZSjG5R00prfWvOni/3qRr
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6f4f06fae7095c29fe8b0b487d19dc534bfc1121bda783595467d16de29d3c06.elf family_gafgyt -
Gafgyt family
Files
-
090d65ee718715c4ed64819b2715dafe.bin.zip
Password: infected
-
6f4f06fae7095c29fe8b0b487d19dc534bfc1121bda783595467d16de29d3c06.elf.elf linux mipsbe