Behavioral task
behavioral1
Sample
11efc90303ece2af244938bf50afde60c0ccb9aca1aa3a35364a6d03929767d3.elf
Resource
debian9-armhf-20240226-en
1 signatures
150 seconds
General
-
Target
8ce7cbe36d0a80c6264e8da29413bc5e.bin
-
Size
57KB
-
MD5
52297767b9a5b818f91ffe8f1befb0db
-
SHA1
99caa559bbbb81c263f908763f86967e1ee84ee3
-
SHA256
5141a0c4d8e10158b266103460225e0bbaa0cf82623ca6ca214e41b9f30a012f
-
SHA512
41555a53b794254a471abb1505b392c692c0f33ed8ed84683e721cf3fc491bf3da8db1fc65f02125fda953afeb246d033b140a5c28d60f988e1dfea8a91ed948
-
SSDEEP
768:hIOTDKMxrJ5ygSW52GDDdJ3q+uAw8yG/J8hljWyFpLLg2ebbDbNqMFzUUP/aAeJQ:h9m6rLLjHb6+Nw8y+eljW+pLLM84Ajq7
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
37.221.65.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/11efc90303ece2af244938bf50afde60c0ccb9aca1aa3a35364a6d03929767d3.elf family_gafgyt -
Gafgyt family
Files
-
8ce7cbe36d0a80c6264e8da29413bc5e.bin.zip
Password: infected
-
11efc90303ece2af244938bf50afde60c0ccb9aca1aa3a35364a6d03929767d3.elf.elf linux arm