Behavioral task
behavioral1
Sample
1d6669beef2e11a9bf13e7931015f7d63d0150c58666bbfaf5d88e4c507d9a9a.elf
Resource
debian9-mipsel-20231215-en
0 signatures
150 seconds
General
-
Target
3854f62766408c59e8e6b77880d6301c.bin
-
Size
44KB
-
MD5
a7ab5c41b9521c0b97e999f9aeb99295
-
SHA1
2ecccd1d261e65aefbba44787c202e53e0ae4f58
-
SHA256
804b0959ebf89c1d7e439db0e32d685522767383206a7da84f6c0a4b6cc699f6
-
SHA512
71edd6cce0f90bfffa28e82ec79c583eb104152a23ff4b987ca09cf855b7b6aa6ffdad559d8d0d2380d9d9acf74be4a73fc8bc95b5b59e8c5e21f121ab091961
-
SSDEEP
768:V78AG1PTwK/oQmS0fvANUNBM2uvYlaDbq6dVfgt8Dspa6y9eaJpPERr1ShkpyWIr:V78AELwTQmS0fv7ppOiInxRXERr1GcL8
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
51.250.72.163:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1d6669beef2e11a9bf13e7931015f7d63d0150c58666bbfaf5d88e4c507d9a9a.elf family_gafgyt -
Gafgyt family
Files
-
3854f62766408c59e8e6b77880d6301c.bin.zip
Password: infected
-
1d6669beef2e11a9bf13e7931015f7d63d0150c58666bbfaf5d88e4c507d9a9a.elf.elf linux mipsel