Behavioral task
behavioral1
Sample
78032d1b18047673e460ae768ed38f900d9f8cd85b81dcab42dfcb5cbb95a7a5.elf
Resource
debian9-armhf-20231026-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
1e0751e538197735aec2639cccfabe43.bin
-
Size
67KB
-
MD5
bf0677ce9b50c0f8aa2c0a35e8260c32
-
SHA1
a8f6550575b494c14d5af28e3115ccf579aced15
-
SHA256
f6bba7e9aec4605a11603ddd3bf6ccc4589505b700ce8a15444dc3a1a76f330b
-
SHA512
0027adee5ea2a5aca6045c8f8bc23355db82d72c0612fbf6e35c9f7291c5781eacbb9dc93b3b5dd064a6f9ae9b9cd8403a2e8c3ac2f793430ab9650ecc4d6452
-
SSDEEP
1536:x+PPOy3XFSltHMWKtWNPZvr8E2pOB/a3qsD:x+P2yHFYKwNPZvrSEB/wD
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/78032d1b18047673e460ae768ed38f900d9f8cd85b81dcab42dfcb5cbb95a7a5.elf family_gafgyt -
Gafgyt family
Files
-
1e0751e538197735aec2639cccfabe43.bin.zip
Password: infected
-
78032d1b18047673e460ae768ed38f900d9f8cd85b81dcab42dfcb5cbb95a7a5.elf.elf linux arm