Behavioral task
behavioral1
Sample
assailant.arm4-20240316-0649.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
assailant.arm4-20240316-0649.elf
-
Size
125KB
-
MD5
dcf9fb458ca7f5bbe1f60d9106db4769
-
SHA1
02b3e0600ec88ae25f7b3af2b822765108c2c3f2
-
SHA256
5afac188a5741fee710f74e5e9a17b74c317bd4611d212ce32ec6bdbcc9490c1
-
SHA512
899b0b18f5884b63bbca74c71c30bd8d67294d13d16d59cb01a1c03dd8b836f369b615ea379f6f780d0a76a3f474900b9fe8fad1b3baf43adf9fdba13a236762
-
SSDEEP
3072:SJDZ+6lJQTnoo3DKOzmGfcX5J5hLuhu+6+1AzfqojwQQRh6RYAvZR:RmGa5J5hLuhucojwQQRh6RYAvZR
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
183.81.33.153:42516
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
assailant.arm4-20240316-0649.elf.elf linux arm