Behavioral task
behavioral1
Sample
4480d72a324f519d3a630bf2ef7b118f4e388c5bccdd0a5465bafd2253daa619.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
f8855bf7a1b2240918bd21d05a9ef789.bin
-
Size
51KB
-
MD5
621f34a02d74a26370cc24377d9c93db
-
SHA1
afec261a75a24614afde74b35d38df493b0f5f14
-
SHA256
34d3f274d7ed367e7d09fd4ebcb4cab2c3e5aecd280e913ca5fdfad407d4687e
-
SHA512
d4de13bb9722525156cdaae56a0ebf08c15136b2f9aa2ddd5bcd2cd080e777425a4fe4fd0fffb8e7728550604b64434ade66122452af6d22d742bb66d40e87c2
-
SSDEEP
768:3xaR6d0byFnao7+vUmUoUhHEP5KWABMy67uJE46oSD8aq18JpsOF:3luU3mUBNWuMVuBJaq1Wpsw
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
195.62.32.227:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/4480d72a324f519d3a630bf2ef7b118f4e388c5bccdd0a5465bafd2253daa619.elf family_gafgyt -
Gafgyt family
Files
-
f8855bf7a1b2240918bd21d05a9ef789.bin.zip
Password: infected
-
4480d72a324f519d3a630bf2ef7b118f4e388c5bccdd0a5465bafd2253daa619.elf.elf linux arm