Behavioral task
behavioral1
Sample
56cff0b88f2b3ec69c36186efafc52bf2ee96afcee72377caa936507f393a9f5.elf
Resource
debian9-mipsbe-20240226-en
4 signatures
150 seconds
General
-
Target
5f2c807c01f4e1fdfa7acddf2e1a8d18.bin
-
Size
51KB
-
MD5
c192801aa63f1bbef66ca9473198edf8
-
SHA1
bddfe8bfd7b681ef14c49f35b0f48511a69eb268
-
SHA256
d856e9e1a17cad14c92d21beeca7660135c00e12346af2e81dcbabec564078e2
-
SHA512
d19e9d808f813946ff4dbc56e10252a5a324b836acb20e72d9f76f67388711925fdbf056e8fc248f338d496ca64e5c43698eccc8fb2d66b023946f67fd0104ee
-
SSDEEP
1536:vNNRue/ROWu/uzyKBBTOk0ozkdbmemE+OlsXi86Q:vVoWu/qBBTA1b0WsAQ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.254.140:562
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/56cff0b88f2b3ec69c36186efafc52bf2ee96afcee72377caa936507f393a9f5.elf family_gafgyt -
Gafgyt family
Files
-
5f2c807c01f4e1fdfa7acddf2e1a8d18.bin.zip
Password: infected
-
56cff0b88f2b3ec69c36186efafc52bf2ee96afcee72377caa936507f393a9f5.elf.elf linux mipsbe