Behavioral task
behavioral1
Sample
5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
79e2f80678e32f7a8e4acaeb503a99cd.bin
-
Size
39KB
-
MD5
e60d4bd55657aff82b47e2cec99868fc
-
SHA1
fd69af2ac709b1addee5c57beb1f86632bd981e2
-
SHA256
7bef962eb856fc92068bd4accccf5efc68b0b5bf574cb8052c990a7bbd508498
-
SHA512
de5ec923773c90a4b31246b7495169ea4a604931abcf4550664d4f932ce95de4f30dd3559a4c21a939d10cda7f8261af5b6e7118ab3c0ebe0565982f34692ef9
-
SSDEEP
768:wux0FihHb4aHfZkkWdM5N5oNKXP7ycZVFW3BEllxL5iBH9ZayV7r:h4aHxkdM5o+yin6BAiZaI3
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf family_gafgyt -
Gafgyt family
Files
-
79e2f80678e32f7a8e4acaeb503a99cd.bin.zip
Password: infected
-
5d6230eb45280135c1e5bf43b45ba8c1a64c4a9af8cb822845d691b3706d8068.elf.elf linux mipsbe