Behavioral task
behavioral1
Sample
63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.elf
Resource
debian9-armhf-20231026-en
2 signatures
150 seconds
General
-
Target
63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.zip
-
Size
67KB
-
MD5
b7aed432a94df53379f48c88fdb8a1bb
-
SHA1
9431a13197830c1c70cf6ca7c023d5b299a2e179
-
SHA256
cbfa691e13ec2e687328babed3af50c5f6891a0c51905ad1fa50d4a26825f909
-
SHA512
96b5b7e7f0334a79d9597ff83a30dbd4cce59e7c9dd89bc4a028a26f2508c245135f8a4b406f2aac12bc8b7e6d5747a089114170fb226be55f136d20a03cadda
-
SSDEEP
1536:gPOjZN5+9L+wfko54Jj56flseYl1b0QW75rW:gIZN5ofl54Jj569xYK75q
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
188.166.67.116:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.elf family_gafgyt -
Gafgyt family
Files
-
63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.zip.zip
Password: infected
-
63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13.elf.elf linux arm