Behavioral task
behavioral1
Sample
4891d3c614f400a80e99575e4bbd2e54
Resource
debian9-armhf-20231215-en
5 signatures
150 seconds
General
-
Target
4891d3c614f400a80e99575e4bbd2e54
-
Size
134KB
-
MD5
4891d3c614f400a80e99575e4bbd2e54
-
SHA1
79de7de57613d53c1d87fea9cc0600581024b11b
-
SHA256
3f33b4c9c9ca6b2a03cd51f2e078a09c25cb55c013dd992890b021ab4b992ba3
-
SHA512
bb46adc29e4928a17acdfdf558520254dfc1db6152c02e7b44b05ffb31c901c2dc9f73d5eb12310c79d96f6ef3a338301296a4cbde27dad807ed2b55cde31432
-
SSDEEP
1536:wpw3gfJnUrQJ7Rdvq6iwxZ7DmUN+Pd2I3KKoWLa8G7g6FOipvf7TSWCAbLD6RVmr:xrsD+aPWrCgOj2WCANTDvbySe9am50I2
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
164.68.116.122:65535
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
4891d3c614f400a80e99575e4bbd2e54.elf linux arm