Behavioral task
behavioral1
Sample
3cb63638ef09646afe4985e13fed314a2c447b78db9520646506e1a8ea55ee0f.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
9f22b29bfdc555d178b9fe6976f4fbb4.bin
-
Size
64KB
-
MD5
19c42d8614e2a92006944e1a49d7cb7b
-
SHA1
edac240755bf1dda8a239f6b1c1dd2f2986d4656
-
SHA256
813455f4b902d1cfbd14de443a7cc110ebebf338d2614538894bef3ee582a8e9
-
SHA512
789c1664009f81b8fc5929c077e9047e7034c11635943405c74b0e4baadaa68ce6f55d690f8b5339f41cc900197a75f5c37a9df31ead2ff5ab02c9cbc10867f5
-
SSDEEP
1536:1fE6R/DA9ZenPLIeLHwZnpjnV2n27nNncgQGgbHtTvkH7:aS/TnPcMwPjnHj14ltTvkb
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
45.145.42.90:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3cb63638ef09646afe4985e13fed314a2c447b78db9520646506e1a8ea55ee0f.elf family_gafgyt -
Gafgyt family
Files
-
9f22b29bfdc555d178b9fe6976f4fbb4.bin.zip
Password: infected
-
3cb63638ef09646afe4985e13fed314a2c447b78db9520646506e1a8ea55ee0f.elf.elf linux arm