Behavioral task
behavioral1
Sample
c5df5123d65b2aa40e6174c3f4d89108ddb825f338c29f8e0e54239c981e2ea3.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
2 signatures
150 seconds
General
-
Target
7192be9d0197e6e6e2a5d0a9d439b574.bin
-
Size
64KB
-
MD5
f0b2fc0e61f0888732fa0ca59700d7a5
-
SHA1
d540f46121cd393f9feb852b3a79500b6d5a29ac
-
SHA256
f43328abf3ea49b072921c9baa40005d2880b16754315cf42c34cad29f9a0fc7
-
SHA512
40d10d2d406f547aa4bb4c6be007a35d8ca5a9bb0bfc404b600fafc867510b424f16d50973d31997a00c8ea8f2f5430b08ca7d2405f84d8de899956cb3c6365e
-
SSDEEP
1536:zALNHVyzbLTqGORYk4mTnX+HztOZO22mf3cTmWP4:cNozfTyKE7OqfMTmR
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.244.11:19302
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/c5df5123d65b2aa40e6174c3f4d89108ddb825f338c29f8e0e54239c981e2ea3.elf family_gafgyt -
Gafgyt family
Files
-
7192be9d0197e6e6e2a5d0a9d439b574.bin.zip
Password: infected
-
c5df5123d65b2aa40e6174c3f4d89108ddb825f338c29f8e0e54239c981e2ea3.elf.elf linux mipsel