Behavioral task
behavioral1
Sample
63d3c139793d0c53ce89ba4e05dd6e79146cc5b163486574c644ae601be0d924.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
f9c88fed803865615f33bb80c219b513.bin
-
Size
47KB
-
MD5
46523c23e812b80752ce6d66806dd64e
-
SHA1
37ffa067327fcfb0eadc616838ae0694114efe92
-
SHA256
f6bcdc7cf49fb725806f9e7d69879d7c8178df383a7efee173bda9d969da0cd0
-
SHA512
ed4e24649cbe025d617caf25f2c690900d9c6003be0ca48395d04d879273f37f529609c5300e18fc894097a61aafc3ab4c3531188d1512edb285a0e191d52cb7
-
SSDEEP
768:Wj1tbF2R5A4PTlrk5l76EhQDZyMR1HmTT4GP3H63VzJxikbDNAt66XHM:WbF2YyrvDFRmTcGP8zJxNvG/Xs
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
37.221.65.177:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/63d3c139793d0c53ce89ba4e05dd6e79146cc5b163486574c644ae601be0d924.elf family_gafgyt -
Gafgyt family
Files
-
f9c88fed803865615f33bb80c219b513.bin.zip
Password: infected
-
63d3c139793d0c53ce89ba4e05dd6e79146cc5b163486574c644ae601be0d924.elf.elf linux arm