Behavioral task
behavioral1
Sample
0420951c2303fa09eb5b06825c887b7514bdee31284255fe27fef7c918267b3d.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
aef28e44e56b93f9e045d89ba5d6fc7d.bin
-
Size
47KB
-
MD5
67a9d2a8acba4c8a92c700ed6ad584e7
-
SHA1
58c22952c3b30931223ed52d9113d48d17c03654
-
SHA256
fca3a83c24856d0ebc38ffd1930f6b0d603eda02666839b6b6bca78bec68c9c9
-
SHA512
aabbaf932ba7e1265c29ccaddba1e9ad8d336d20ef14a4b47dc91a6394b28a25cd6960263c3764d3c8cfbb6dded383dbd876a2ef7ad3987dc114c347c394ed5b
-
SSDEEP
768:iePWvFvHOsiq6jhxVVZn4n2b+FY0kCddmzrWQNVkfG5PWh0+YTjzlaefi4W6DPtH:evF/9i1j/ek+KTCDmzHazFQNamTF
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
89.190.156.227:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0420951c2303fa09eb5b06825c887b7514bdee31284255fe27fef7c918267b3d.elf family_gafgyt -
Gafgyt family
Files
-
aef28e44e56b93f9e045d89ba5d6fc7d.bin.zip
Password: infected
-
0420951c2303fa09eb5b06825c887b7514bdee31284255fe27fef7c918267b3d.elf.elf linux arm