Behavioral task
behavioral1
Sample
f0d62aec4a2a5353a6416bbd403969fc0617d08aeb8eb9e09de4d4068a2fd9f3.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
6afb6ce3b5eaac5a043b3c10a906deff.bin
-
Size
70KB
-
MD5
5a6f8bf6633be748a5d9553a9ba726b4
-
SHA1
117aa2c0cf4eb0d987c072860336f32d0aca74cd
-
SHA256
b81a3b185047f433fc399911135f5dcb9a0a336c2c88b9b6d115e92c48b13bf4
-
SHA512
c8016632845153291490471ba9023a975783fa6f3720fa955d69abcf33e4a2a9f08b805605c05c2a7a21fb3421d77a5d5fbc8ca20849354bf497aa0f2d48da5e
-
SSDEEP
1536:ldEVJVwHGzx3gQznTui833ac3MbjcUcXZeyVUeJUI17nHPD:ldqVwHEgQzni3ac2jcjpe/QZ17HPD
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.62.32.227:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/f0d62aec4a2a5353a6416bbd403969fc0617d08aeb8eb9e09de4d4068a2fd9f3.elf family_gafgyt -
Gafgyt family
Files
-
6afb6ce3b5eaac5a043b3c10a906deff.bin.zip
Password: infected
-
f0d62aec4a2a5353a6416bbd403969fc0617d08aeb8eb9e09de4d4068a2fd9f3.elf.elf linux arm