Behavioral task
behavioral1
Sample
fdedd755de15e3e5504ea5a6ea6e83de6fe4d1ce1a034c38624c37e1e650d499.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
3b83e586fbf10bfb4ac81702a02bb8bf.bin
-
Size
47KB
-
MD5
548ff6a9b999b41bf5fe96c26fc60aae
-
SHA1
fdfe344fe0f476504403f1489f2984ad8097395b
-
SHA256
a59d37d1e956b7de970e0bd3948bff2f0dc5f69f988cdd50368423e8a7cac19a
-
SHA512
7dce953a3d3f8c2701d7048ba957edaa1585a3bdb1e565cd4aa21a29ea64f7143731548e3a575c292177b3326d17c6c22501b1653f42c7423fe92616bccfb0b3
-
SSDEEP
768:r+8gUzef4UFQjoDk+cy7SZ0qdPMJJLjl3Embm0N2wcI+0Z/FyBJFXuiEglKFeo7U:Y6jo4+AZ0kMTxEmbmZlYZ6IfgY7oi+r
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.145.42.90:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/fdedd755de15e3e5504ea5a6ea6e83de6fe4d1ce1a034c38624c37e1e650d499.elf family_gafgyt -
Gafgyt family
Files
-
3b83e586fbf10bfb4ac81702a02bb8bf.bin.zip
Password: infected
-
fdedd755de15e3e5504ea5a6ea6e83de6fe4d1ce1a034c38624c37e1e650d499.elf.elf linux arm