Behavioral task
behavioral1
Sample
c87a27813019aab5a37ab05260eff38318ca12be6169f3269d2e1e853899671f.elf
Resource
debian9-armhf-20231026-en
2 signatures
150 seconds
General
-
Target
9f2bb17f62f8194b7f273c5ec9c6dd1f.bin
-
Size
46KB
-
MD5
be782286d18842b9912e33867ad9cedd
-
SHA1
fb5d522207db798400d8f8cd07c06532e44fa4da
-
SHA256
52d75b9494ee09c8bdbe1314046097f922d9617721e881aad906bd65431bbd0c
-
SHA512
0dc2600abee83d822938fc6ab552758e0c511877183aa352ea75e89294867f98d38a237271e5a065c1986b1ef559a3623ae2d3ebde8c3a45c0fc687e9f60b11f
-
SSDEEP
768:OvKPNw3JeikrraZyH3Jz/9FZnQ/0oDIc+UiModtY/eXonVokl81D8ExUm:m6AkrcyHJ/zZOLLiM+TklB8p
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
178.218.146.89:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/c87a27813019aab5a37ab05260eff38318ca12be6169f3269d2e1e853899671f.elf family_gafgyt -
Gafgyt family
Files
-
9f2bb17f62f8194b7f273c5ec9c6dd1f.bin.zip
Password: infected
-
c87a27813019aab5a37ab05260eff38318ca12be6169f3269d2e1e853899671f.elf.elf linux arm