Behavioral task
behavioral1
Sample
390f3a00bba0d078f79351f2a9d9b8f04648bde1597025c3b5431823ce512122.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
5688a2ce7bf105009d759e021671d4e2.bin
-
Size
51KB
-
MD5
1ac0dfba6670b7c2780eb673debf723c
-
SHA1
6777f02d494819c5b4dc832b158236cb7de65266
-
SHA256
9745bb9a4f611cad6d2a04d3199b2febb45fbf4a3af6a82058e9417d8da6382a
-
SHA512
00c27cb7ab0aa4f0174dc0f06935180fee84b2ec9d7c4baad57a9a757fb1f073fbc7fcc6aed7910c781d01f242ecf81a40dd504e30f116ae27ddbc5cbf34bc51
-
SSDEEP
1536:59IMhWnKacnWiPqBqrnsTkqttkWxyChaaTYY:59vknKacLCBU+kqttIChJJ
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
91.92.254.140:562
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/390f3a00bba0d078f79351f2a9d9b8f04648bde1597025c3b5431823ce512122.elf family_gafgyt -
Gafgyt family
Files
-
5688a2ce7bf105009d759e021671d4e2.bin.zip
Password: infected
-
390f3a00bba0d078f79351f2a9d9b8f04648bde1597025c3b5431823ce512122.elf.elf linux mipsel