Behavioral task
behavioral1
Sample
54b61b65a074dd88959bd0af570993a118733de0bbbde61bdfcdd253b5eae010.elf
Resource
debian9-armhf-20231026-en
2 signatures
150 seconds
General
-
Target
66c703edaa639478df2a7333aaf08a53.bin
-
Size
44KB
-
MD5
b50bf57ec47746f10fbbc19b2e2bc9d8
-
SHA1
13eb4234793ab43c24a53751e642d93cb6d6aea0
-
SHA256
52bd97f11bbacebf3cc5fc65bdaef50d8a45c1d295896ded04d9ce387ac7d99d
-
SHA512
a643ee063b7fb360e82c9cce225ea65c255b9d13d5ac9175cc27b5c09853e2a4fb58ab39e25b5e41db0d98c76c9d070c49b8107bdfa48bebde9b4e30539f1807
-
SSDEEP
768:RZYnc0seoIXfzpQYU2peDaF0grGvBWJQVxge7JhBJ+apI6n3wsGjADDUSCAnOxAK:XYncVvIX7U2EDaF0QIBWJQVxtlN+ay6E
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/54b61b65a074dd88959bd0af570993a118733de0bbbde61bdfcdd253b5eae010.elf family_gafgyt -
Gafgyt family
Files
-
66c703edaa639478df2a7333aaf08a53.bin.zip
Password: infected
-
54b61b65a074dd88959bd0af570993a118733de0bbbde61bdfcdd253b5eae010.elf.elf linux arm