Behavioral task
behavioral1
Sample
assailant.arm5-20240316-0649.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
assailant.arm5-20240316-0649.elf
-
Size
117KB
-
MD5
3a60d568d3eb588df6d6016ec36461b6
-
SHA1
3c7490b086e6d5df1bcc5db58bb7eeacc0f63e12
-
SHA256
78dc6e1d4fbb80814f5c6d7a7da57aaac32a50a97b9963461ff0a19834246d94
-
SHA512
e1b4bc71e447b5747ce6eedb186b3dd44833c660f948152f1308ad3a0349f5f8cd27bda9bba1c8683553f6ac0f7b52aaeb3e1a197085411b54a1db11b57f7b80
-
SSDEEP
3072:0JDZ+6lJQTnoo3AK5nnyXxfWW5hLFCuXUSP4eoC9DQlD6ObAF5R:7nyBuW5hLFCuVhoC9DQlD6ObAF5R
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
183.81.33.153:42516
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
assailant.arm5-20240316-0649.elf.elf linux arm