Behavioral task
behavioral1
Sample
2d63947460dab1a71e45a08b5a8faa14edb9c9f26554fdf20467a8e03d00f138.elf
Resource
debian9-armhf-20231215-en
2 signatures
150 seconds
General
-
Target
2075eee9eea9978733d8120215beb861.bin
-
Size
53KB
-
MD5
be11a20326bda0825714546e0f0bce07
-
SHA1
fbd742b038596d1d5119908171e7ada42a287703
-
SHA256
6f6b622992adbedaf8943fedc6cf5914f6330040cc03f9212bef25af7d008290
-
SHA512
ac8dd6df1506a05301aeb81bcd9d2d94b311513adf009580e1f0a50b33039e2abc4e7289b0531e9e762f6e9ecc458127ca9b9f932753f07328418b7090c906e3
-
SSDEEP
768:yx1PzIRc5c9rvQbPaAmL8G11RUWhIuxq8WSIIIGPGXc/lNlyM4jWDQNwpJPXh5BU:QxcxvgrU8SgQxq8WpmGXcdJH2lz/
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
51.250.72.163:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2d63947460dab1a71e45a08b5a8faa14edb9c9f26554fdf20467a8e03d00f138.elf family_gafgyt -
Gafgyt family
Files
-
2075eee9eea9978733d8120215beb861.bin.zip
Password: infected
-
2d63947460dab1a71e45a08b5a8faa14edb9c9f26554fdf20467a8e03d00f138.elf.elf linux arm