Behavioral task
behavioral1
Sample
e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
2 signatures
150 seconds
General
-
Target
ba86cf49f6c2ddae1ab960deade99da2.bin
-
Size
55KB
-
MD5
38f8b2d4b673f59b1e6347ae7d6291f7
-
SHA1
9cb2f1d5b49dbe48f27ea5d4db69d378981c01eb
-
SHA256
1144d8fbf0e781c9c935f78ee0d63316fe855aeb46cb019c160aed373b4798fa
-
SHA512
39d2afe9a495d00e8d2a89bb5723cfa00bdd21d829739d45640e9c6006579198779d03b160d159ff1cc51e508dc947fa8e2e997ced91d5fa03b4d8070cc5bbea
-
SSDEEP
1536:8wVWXlkmCnIgMQk7UYBikYMy+KwQwDXT0:tWVkm6IgwZikcrwP0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.170:4444
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf family_gafgyt -
Gafgyt family
Files
-
ba86cf49f6c2ddae1ab960deade99da2.bin.zip
Password: infected
-
e4d0ac1e6a687c476aca7df34cde03b491f3401d55a2d42409655b5d934be3a6.elf.elf linux arm