Behavioral task
behavioral1
Sample
6876f866f7711fa596b2a84be3915226c6f159df094d6d4aac7ea8933bf90662.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
0 signatures
150 seconds
General
-
Target
8e277d2791cc09b39112a45fd7e9aceb.bin
-
Size
38KB
-
MD5
a37e1065796c5bd029d778cd57251fce
-
SHA1
03966b792290d11030ff8fc8cf479a7b57ab623e
-
SHA256
e599304acb4ba0be47b0e4bd82d16d9be98e6251f104bce37108204a07302d94
-
SHA512
1e1ee34d6c50deb8bab8125fd2f51f496a1b8dba1a599cb0c1fd12cafe7c07f63945ed1ee177f0ed77100ba25e80476a44b968914f6848d1f28f376d94722a7f
-
SSDEEP
768:yeyres0ASMQ/fZVtTxYbl7Am4nifpWCCZdj8RI+oOG0lHqwFnDan5Rn0/dH6:TyreTMafZvx07D4niBgdj8Gt0rFKcN6
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.253.246.12:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/6876f866f7711fa596b2a84be3915226c6f159df094d6d4aac7ea8933bf90662.elf family_gafgyt -
Gafgyt family
Files
-
8e277d2791cc09b39112a45fd7e9aceb.bin.zip
Password: infected
-
6876f866f7711fa596b2a84be3915226c6f159df094d6d4aac7ea8933bf90662.elf.elf linux arm