Behavioral task
behavioral1
Sample
d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
40d63a0757e8dde632c5b9fba70a6267.bin
-
Size
55KB
-
MD5
02a6c8d1804acff125d9970835482a1f
-
SHA1
78235a68fcffc5f7fc0dc06d561216c93f3a34a4
-
SHA256
1f2141e8d7c41cc057b8d82542a9c22634449d7a953d8c6016831458632591b7
-
SHA512
cffd5f8fc653a1b32970dd4ea366bfe1da783c0396694869ffc13dd155b2095de84ee37c2809a8d387b3cd4771183f9feae187e93a52b26f1d3656529e59b0d9
-
SSDEEP
768:dEixOlMuMb1UQ2OODYO8dptK4hYCW5C1QVebZTAOMZQjIu9Kks0FjRRGM095B5:dERlAb1UQ2hDy5KGZbHOu9KksGjeMC
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
78.40.117.218:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939.elf family_gafgyt -
Gafgyt family
Files
-
40d63a0757e8dde632c5b9fba70a6267.bin.zip
Password: infected
-
d85e079f2d774cace1e6b544e57300efe3a51ee1fff2d499123ce39945c77939.elf.elf linux arm