Behavioral task
behavioral1
Sample
3fda2702a686fe3c9fee387ad13a67afe26e022b32945bb128ca3e666a87adbe.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
234737e0490b27df0b09f4309fced95b.bin
-
Size
44KB
-
MD5
5491e034e4c880d582c3a9e900b6c156
-
SHA1
de19059c1ce12419068e4af01c2eb0df44b668a3
-
SHA256
ba5a2589e62046909d15507db71ca51008afae057af46d97e405304c2d8ff76c
-
SHA512
1871823c99f14cbd1bc8c7f88455843c4129dcb6d7c3d9b4cb39448ad14404f5e318fee7dfb590292377a5a2c1a1d3146c47805a1017564b186d9fc7acb156d9
-
SSDEEP
768:hjGR+vy9fiJnNHC7TIt8zHiZw4nxYgXqwcIIYOmbFq1bwgE2ZZJv0BS5PzXGkMDZ:kRoSiJnNBtWEOmbQXECZyohDGnoq
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
92.249.48.38:606
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/3fda2702a686fe3c9fee387ad13a67afe26e022b32945bb128ca3e666a87adbe.elf family_gafgyt -
Gafgyt family
Files
-
234737e0490b27df0b09f4309fced95b.bin.zip
Password: infected
-
3fda2702a686fe3c9fee387ad13a67afe26e022b32945bb128ca3e666a87adbe.elf.elf linux arm