Behavioral task
behavioral1
Sample
7fdc310ffd1cb5088bb35af925105220de5fb8cb4cb3cb5c889a93f5ddd0420f.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
30cdd978678c9af176def0770a652740.bin
-
Size
46KB
-
MD5
0d2607faf51e2287f0cfbfe4133a96ad
-
SHA1
f531e7127994d906260431129d64819d7f3fbead
-
SHA256
4bdca7847539e96ceffdd7e386a5400ca3d4a3e7466fb9ad919a0d565322a32b
-
SHA512
76f06fe30fec2d41cb607421da1794d4bc20fa01ebec85e6121bb5e1c342925512a60d9fe673b85e97a96779f560efc7f3ccf9dca822046e860a2e4196f33be5
-
SSDEEP
768:pQsNTNcUw+5e4z7T0djFczpNNSIOCoE9wZF0aEuaO8xqcZuXmC/hMeWOfxX/q:p5TN9DQ4z7T06zpnBoEeDmxqcCMMJPq
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
103.173.255.143:839
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7fdc310ffd1cb5088bb35af925105220de5fb8cb4cb3cb5c889a93f5ddd0420f.elf family_gafgyt -
Gafgyt family
Files
-
30cdd978678c9af176def0770a652740.bin.zip
Password: infected
-
7fdc310ffd1cb5088bb35af925105220de5fb8cb4cb3cb5c889a93f5ddd0420f.elf.elf linux arm