Behavioral task
behavioral1
Sample
ba4329e90e8bb44acc165f93a571f534e90aed1a4f72fde2ee520ed8c5abc0d6.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
c4d239466a9ffcefb693a421f2e084f2.bin
-
Size
64KB
-
MD5
7df2148da46594ae5221fd6c97b06766
-
SHA1
01032d2ff9a05951b502645c56ff17d434ad3f29
-
SHA256
2c99823be26be857b52d210c40681113e11ac018e993805458d0104d3ec300d0
-
SHA512
2db6cef4047377311d36a20e68ae9a99cab2ee80268f01a296aa2039d3a58025deb448fa646850aa213491395c956913ab17c3bbee97a2bb8fb0e92e960da685
-
SSDEEP
1536:3p2tXe+kTWSl9Tmspp1JQ932Hk4LhKUrP23x9VrQnqEq3EjzJSUXcUMYDr:3oI+kTWrsppbQ9mkzkWVrkq3OcUM6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ba4329e90e8bb44acc165f93a571f534e90aed1a4f72fde2ee520ed8c5abc0d6.elf family_gafgyt -
Gafgyt family
Files
-
c4d239466a9ffcefb693a421f2e084f2.bin.zip
Password: infected
-
ba4329e90e8bb44acc165f93a571f534e90aed1a4f72fde2ee520ed8c5abc0d6.elf.elf linux arm