Behavioral task
behavioral1
Sample
f64fec33af3c4b4028ca7c7a606b5517cec860401d9f97a38f4193f65abe5ec4.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
f3a685425b70daa915402bc585851931.bin
-
Size
38KB
-
MD5
ee6d6594387d4d6af0411f5f1810da52
-
SHA1
6ada2589f52fae78625c056ddeefd04bd0657ef5
-
SHA256
67e7ffc9e630db6a98085a0c4a9c34e179b2880fe1d813fb6da62f8a76eb62cb
-
SHA512
5a614bf166d3e28a0fb8dcc96f8e4e3641a7952cdf9a4780b7157ec9c4269e612ca002be259fbaccf6687f9776b4c05f800503eec90d294f19cc4ed5f2e73996
-
SSDEEP
768:xf6JJztIDcFKGK80gaVA6a9m+gaTl71Y84DBRDD3/o:xK5u8K4aVAfQNK71YNFRnPo
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.144.165.227:22
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f64fec33af3c4b4028ca7c7a606b5517cec860401d9f97a38f4193f65abe5ec4.elf family_gafgyt -
Gafgyt family
Files
-
f3a685425b70daa915402bc585851931.bin.zip
Password: infected
-
f64fec33af3c4b4028ca7c7a606b5517cec860401d9f97a38f4193f65abe5ec4.elf.elf linux arm