Behavioral task
behavioral1
Sample
f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
2 signatures
150 seconds
General
-
Target
85e555a1a9164a2e34557421db938ebc.bin
-
Size
55KB
-
MD5
e91b0d78693c8bc9ef2e8ee8421a59be
-
SHA1
fe9c1fa52a524e3d6896d429378369abf7763b13
-
SHA256
93589f5a2b47aefec269380b5906fbfbb866c48b1f1e9ea87307822ebd05d7ed
-
SHA512
ffd8b7a3bde1158c40d618b89409ac00a0015509c41e9e79a0df85721c790ecd44a37fb28a1a979e4f259b05928188d87f93e89c3048d5c72e854ada4d54f0ec
-
SSDEEP
1536:KC89vakWtN/RMdXyjpeKrruLtt4OBvAxnH2/SkIv5LrZQ:lCWLRqXyVruZt4OBvwNV5S
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
78.40.117.218:23
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule static1/unpack001/f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf family_gafgyt -
Gafgyt family
Files
-
85e555a1a9164a2e34557421db938ebc.bin.zip
Password: infected
-
f2ae4034297bc8e03be9387b1815522b7cf07076b4be1a06f0d3039e45e96f60.elf.elf linux mipsbe