Behavioral task
behavioral1
Sample
d511c100966b936df679e667e2cc18bd4bdef37c2d65ddd5ff32932b4815309c.elf
Resource
debian9-mipsel-20231026-en
2 signatures
150 seconds
General
-
Target
3ff9e2d0797020794e34365c37e9a963.bin
-
Size
42KB
-
MD5
fcd8b16e306bfdc5a8f74bc2604d5f46
-
SHA1
8537ae3f724d4124a29408b7eaaa0c86f0819d0e
-
SHA256
55f139d3adc4cabb232b25bdaecb1ce7a22135a53f21e555e99bee971e6e93c6
-
SHA512
b24745689f09e90fc27588b68c2939fdb059e99acf8000458a73afe8adb04b86a73c28b64b4ad217edc38697bd4762d7bb5051aed3a8614bcb61ea9b995a8977
-
SSDEEP
768:77kmecJZ19YkA/cxRg4aodR4msOzl/YkiEFbkv3x6HglI/u8KXoLvnWqY6vr:77kYJPC/c7Xhl/YBEFQv3NyKXoTRN
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.29.2.134:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/d511c100966b936df679e667e2cc18bd4bdef37c2d65ddd5ff32932b4815309c.elf family_gafgyt -
Gafgyt family
Files
-
3ff9e2d0797020794e34365c37e9a963.bin.zip
Password: infected
-
d511c100966b936df679e667e2cc18bd4bdef37c2d65ddd5ff32932b4815309c.elf.elf linux mipsel