Behavioral task
behavioral1
Sample
172a191832a9da1f610a750cb86538580766ce7fc8291bdcf467483396ab3952.elf
Resource
debian9-mipsel-20240226-en
2 signatures
150 seconds
General
-
Target
7d018af29e082710b50e612980111f51.bin
-
Size
39KB
-
MD5
d97dfa8b0605a5a9773cb7fc7fa31412
-
SHA1
eba98497731df78318d6a639a48446e7638e474f
-
SHA256
bbb760aaf59854dbc39e5513ce8d94947cf85557ffc1ed02b6cdd6bd2074fb88
-
SHA512
6f3e7b1d9cd3ced56c5d198fe3d7b40216bcdf36fd055ffc1cfee4bff2ec79ecd8befcc036c2273c46c2c6318975f2d851abc142c873e34ae9e86707517d3c9d
-
SSDEEP
768:wXP5/OGyATBIoEy8Gd1HXXse4TzBkC8qH6qVYd9yhgn2lgN2qbFxU/4oUmC8UjEG:wU86oL8GdhXoB0qdO9yen26N2p/4BzpH
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/172a191832a9da1f610a750cb86538580766ce7fc8291bdcf467483396ab3952.elf family_gafgyt -
Gafgyt family
Files
-
7d018af29e082710b50e612980111f51.bin.zip
Password: infected
-
172a191832a9da1f610a750cb86538580766ce7fc8291bdcf467483396ab3952.elf.elf linux mipsel