Behavioral task
behavioral1
Sample
1eb996487444bea8d7084a384fb8c622fe68038e3fac101ec288c0e6e878e990.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
00a4e72f117bd8fb709db7aa48bdc78f.bin
-
Size
49KB
-
MD5
3076c65de0fc2f32fdfb3bc2018f6b4e
-
SHA1
12f3726ce4db34794017d91e6a9735e6a26ef740
-
SHA256
f03eca3f5b0b679a6b68220f037ec711cfbf72d2b9963926db4385b890e8da21
-
SHA512
f62292bb35cccb9d5ed35c35499b5be7e96669ac4937872925ec859e8a785bc450a5f55192efdcd8cbf3a2e40773c0d0b0f75ae3332a2d71cb20e3b2089952ca
-
SSDEEP
768:H8KRwv8XmPnkIj9TOjqsBe0SES2HL13qG6xqvvn55PJFMcmDI8UTzP:v+vxkIj9TCqMg2hKxqH55hFMcmDIxb
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.71.220:2821
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/1eb996487444bea8d7084a384fb8c622fe68038e3fac101ec288c0e6e878e990.elf family_gafgyt -
Gafgyt family
Files
-
00a4e72f117bd8fb709db7aa48bdc78f.bin.zip
Password: infected
-
1eb996487444bea8d7084a384fb8c622fe68038e3fac101ec288c0e6e878e990.elf.elf linux arm