Behavioral task
behavioral1
Sample
96041a9b535707f03ead8059db28c2fd76247794c2020eba53e09e52c2e45bb6.elf
Resource
debian9-armhf-20231026-en
2 signatures
150 seconds
General
-
Target
b3e385194a542c7b28a7be926303307c.bin
-
Size
67KB
-
MD5
3194a84737a6a3e56678cc90a6753749
-
SHA1
0e0e5242b655b017a4f05f42a3df8d30d3122f68
-
SHA256
a97fa0ceab30d6c9c3266613d353b5f700a5ab19ffdecdec43e06d4feabd8624
-
SHA512
c49dbab4d00ce4395d801d021d835644673b1c9d41303d5787495202c258a677f794124ad62024d7f30d56eaf105efcbd749930109e2fbf789c14a3093734702
-
SSDEEP
1536:UmMKVcvVOINUzfrhOb5N42No+MZnnbWWF8hW4AQvpcwJJN/bv:U66kISzfrQ4ounKW2W1QvpBJJl
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.29.2.134:12345
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/96041a9b535707f03ead8059db28c2fd76247794c2020eba53e09e52c2e45bb6.elf family_gafgyt -
Gafgyt family
Files
-
b3e385194a542c7b28a7be926303307c.bin.zip
Password: infected
-
96041a9b535707f03ead8059db28c2fd76247794c2020eba53e09e52c2e45bb6.elf.elf linux arm