Behavioral task
behavioral1
Sample
564cd5b678024ccd6c03c48f1c3f3212
Resource
debian9-armhf-20231215-en
debian-9-armhf
5 signatures
150 seconds
General
-
Target
564cd5b678024ccd6c03c48f1c3f3212
-
Size
145KB
-
MD5
564cd5b678024ccd6c03c48f1c3f3212
-
SHA1
ad9b25580e00ca6b1e3833cec871cc561f93b8e3
-
SHA256
c4d17d1ffe752f721dcea3f2738bf44a823faa2f8897d36bc93168e2ece384ca
-
SHA512
5ae7138bee18bd41deec9751dc07031235e252a666cd028dccc4200190656b552296c5d1e52d880dcaa17efa0fdb6cb76b1ac7b9713a909a78d154748963004c
-
SSDEEP
3072:5emxFE5065W3Zak1XtagdvJgXgqFxse9l7GWmV4kSM2LYgV:520Rpawt7JgXgqZGWmV4kSM2LYgV
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.209.70.120:20
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
564cd5b678024ccd6c03c48f1c3f3212.elf linux arm