Behavioral task
behavioral1
Sample
a02e8d85f6293dedffbae8b5a0dc6a25f44a51818f74289eae4bb37dfe096acf.elf
Resource
debian9-armhf-20231222-en
2 signatures
150 seconds
General
-
Target
1528dbfee080b4d6e45ea9ac36189b4c.bin
-
Size
40KB
-
MD5
44b974802f91a80c68925d99aa988817
-
SHA1
c1e40ed7e04b75b9bcda905d6e97ceeb2bac2e99
-
SHA256
7d85a2f9fc736e60e2fa428fc8a7f1979ffef6e406c1046eb93a2ab4746259df
-
SHA512
f54e8097dc4970507d7d8a0beb36db1c8e29c4bb341692d765d3fc1dbbc8efa8d9527288041f6c2c3d1614ba97e9d3ecfb9a676d76414440370b62de83bdf757
-
SSDEEP
768:cPtdWQH558gdh0MTiMX4ZSkBllVf7u/XbKl/sXWWNrhldMNiUxat9S01Gj:cPbWQw4GMTiMQSkHevb3jNFMvot9Nm
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.79:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a02e8d85f6293dedffbae8b5a0dc6a25f44a51818f74289eae4bb37dfe096acf.elf family_gafgyt -
Gafgyt family
Files
-
1528dbfee080b4d6e45ea9ac36189b4c.bin.zip
Password: infected
-
a02e8d85f6293dedffbae8b5a0dc6a25f44a51818f74289eae4bb37dfe096acf.elf.elf linux arm