Behavioral task
behavioral1
Sample
196381ab55458962ffc149b510b67b62590fc3a363a899a1da1a9e63422be62d.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
5b16164275d100fc5d56db9aaa45063e.bin
-
Size
64KB
-
MD5
4d9d2602ae04a26c9cd18103b7a8325b
-
SHA1
d1f523dcd0e69d7a4d3d8d226205cbc415be9cc9
-
SHA256
0c2b6f3320f21b76b0e446d3432965853295cbacee59cd10fd71c828508f9b9f
-
SHA512
b8abebf6e5b7e0f5cec24986046b91fd0d62c06e24c638da92ea2877b36d15e04ab1672d3a419e6f93713a98f5b5d06ae16e703147c93ec3d37346eb58c4fd25
-
SSDEEP
1536:iIRL0+vsiLKeqLy/2e4iJvt1Pfq337Xt9Z061Z04UbO/mARNWOL:iI5Hvsihqe/2e4ilt1KHZ6bqRao
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.145.42.90:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/196381ab55458962ffc149b510b67b62590fc3a363a899a1da1a9e63422be62d.elf family_gafgyt -
Gafgyt family
Files
-
5b16164275d100fc5d56db9aaa45063e.bin.zip
Password: infected
-
196381ab55458962ffc149b510b67b62590fc3a363a899a1da1a9e63422be62d.elf.elf linux arm