Behavioral task
behavioral1
Sample
57d6e846aad7d77cf707c2cc4c86cbbe9bd618f5f537eec2fe03435845138a8d.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
108ec177b27ebd2b0a9cb072744c6e24.bin
-
Size
43KB
-
MD5
557db0cbe4dfb44be8287c48d5c488d7
-
SHA1
3529caad4d44f793a42bf870680376f910b56dd7
-
SHA256
39ca608882669c307db1f5d70615741b5fdcf231a94314337c800c5919d3e0b1
-
SHA512
33730d4d16dac6840aa4a382c0d598e9a05f2d010506ed57d569848b522940a85ce75b29692927c99bef1e682ecef988283cb056bbe8c3c1b56329767786ceb4
-
SSDEEP
768:7Jp+ZAz8vJ/+CgzWFffFRPt1rQAxq5fRR4shiBpPHRx7pD+AY2fEqrN5eP2Z:7JUAhqFnthQKq5fxhcpPHv9U2JP+2Z
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.71.205:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/57d6e846aad7d77cf707c2cc4c86cbbe9bd618f5f537eec2fe03435845138a8d.elf family_gafgyt -
Gafgyt family
Files
-
108ec177b27ebd2b0a9cb072744c6e24.bin.zip
Password: infected
-
57d6e846aad7d77cf707c2cc4c86cbbe9bd618f5f537eec2fe03435845138a8d.elf.elf linux arm