Behavioral task
behavioral1
Sample
bbf54c47d707cb5ce5ea9a1054faecd3ed6cbf6337ff89c250d82925648818b3.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
9c390a025f471a19d52479b623e0e973.bin
-
Size
47KB
-
MD5
a8f1bdd190e620e6b3685505c3e05b94
-
SHA1
4402995a39f4cd37e16627dd07a7ea9f2fd88c16
-
SHA256
3e41f426feffe1df57a6233329b7432cf5fdc446af6c0ccde4090ad2c27c94d5
-
SHA512
94cf164d12723a4a71c28f4119bc4789be4356cb12b08738770f9bb364b015b33f9ed9594d876c6d703dae8db3f3c86b8320508aff0a97758929c0c66a150d72
-
SSDEEP
768:paOyeb5gq+kDUMwMf2aXityfPU26/OZB2hxHnaOL88FrE1I4OQ16uMPejv9JFHbD:VPYMP/5zWxH9xFoOQRAC9JFH95pMuq/g
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.196.8.31:76
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/bbf54c47d707cb5ce5ea9a1054faecd3ed6cbf6337ff89c250d82925648818b3.elf family_gafgyt -
Gafgyt family
Files
-
9c390a025f471a19d52479b623e0e973.bin.zip
Password: infected
-
bbf54c47d707cb5ce5ea9a1054faecd3ed6cbf6337ff89c250d82925648818b3.elf.elf linux arm