Behavioral task
behavioral1
Sample
512debae32614ff552dde3385bed079ebd1db93e83e2eb3772e6ec9438d47a96.elf
Resource
debian9-mipsbe-20240226-en
4 signatures
150 seconds
General
-
Target
e94a16657ffbc48e0f4f2737acc3f7ba.bin
-
Size
47KB
-
MD5
3c0250a5f22382dc04c8e94e8eb27498
-
SHA1
68fae24a9cbf62f793d391f7b454956dc77f0cfd
-
SHA256
5bcfe309dcd914156f7f8039ef1cbc21f1fb2eb94a1236502805c9fd6cd1900d
-
SHA512
e6cb4fa27a8a1f79398e85168059da62b1d373126564cad40931cb3baefe18ecd814554774cc95fc65f0771fbd73070b1dad38510a0cc0d0ae1dc50fd5a65102
-
SSDEEP
768:eRB8SRHgtkXXyVnB74ETvn/SW54Gk0wgQUIJKBF1opZeYflyaqJM727GB8CpFdxh:umSxgOXiBxSW5ZkDnUQqKPeYflyDC72E
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.71.220:2821
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/512debae32614ff552dde3385bed079ebd1db93e83e2eb3772e6ec9438d47a96.elf family_gafgyt -
Gafgyt family
Files
-
e94a16657ffbc48e0f4f2737acc3f7ba.bin.zip
Password: infected
-
512debae32614ff552dde3385bed079ebd1db93e83e2eb3772e6ec9438d47a96.elf.elf linux mipsbe