Behavioral task
behavioral1
Sample
286d4e775d7e9f95fe4dc805b47ca99b4e6b5da8b53211e4c2e4671e62655304.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
d591b497663bcdad397b7727b240e9eb.bin
-
Size
67KB
-
MD5
1059af6589293b7154d23f4fbfb81b79
-
SHA1
74c5c09ece69f03c8685a2b0823cb666376c1603
-
SHA256
520ac36c40f5ef90d3e7ab906dfcf93c0343c032cbb3e22b977d289c1bbfd96f
-
SHA512
e3ad48947aa2e53957e9f4c7a94bd5876ea7ad480eecdc259060b7e0ba8bb78d374c4287055c76b47c2605239c1594cc9a4c5dabdebea1d250448fe3d2bf9acf
-
SSDEEP
1536:9rDDh2fI/luoP9OMpOaBlZwkaY4gYSlVFVxmDEL8sEbVIlfqBCsMgI0ijz:9NZ9OMkaBlFigVNmgBESg5ijz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.71.205:4258
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/286d4e775d7e9f95fe4dc805b47ca99b4e6b5da8b53211e4c2e4671e62655304.elf family_gafgyt -
Gafgyt family
Files
-
d591b497663bcdad397b7727b240e9eb.bin.zip
Password: infected
-
286d4e775d7e9f95fe4dc805b47ca99b4e6b5da8b53211e4c2e4671e62655304.elf.elf linux arm