Behavioral task
behavioral1
Sample
620fe6d6a68d7bc160c803a3e570468e
Resource
debian9-armhf-20231215-en
2 signatures
150 seconds
General
-
Target
620fe6d6a68d7bc160c803a3e570468e
-
Size
109KB
-
MD5
620fe6d6a68d7bc160c803a3e570468e
-
SHA1
d5383b375bad000c9ba9f6b61c0023a16f22f43c
-
SHA256
b9a68de07a244a3e2eee8ee7600addb713a922890529826be1bc9ad87f452a15
-
SHA512
65221d1c16fe03e341da8897e7702d97a5847c418691d431c7e17f84098195b66149701375eb9fa9f6485de1da18cc1cb2a38234d4f909e437c4d5ec8d7872ec
-
SSDEEP
3072:WeCvhYbeK7CaZUa/kHGvQcgFnF+mGmGkaX5Ko:2vhY3CadkHGyF+mGmGks5Ko
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
23.254.211.250:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
620fe6d6a68d7bc160c803a3e570468e.elf linux arm