Behavioral task
behavioral1
Sample
0ae5f1507bb3ac39ab8414fd17c2add04e24a69242c29b4848b698b173e0bf66.elf
Resource
debian9-mipsbe-20240226-en
2 signatures
150 seconds
General
-
Target
0ab61c6d4ae458dd3c367cee58e91a1f.bin
-
Size
47KB
-
MD5
a1cbc5db0c1c124cf8a69414ca5479d4
-
SHA1
7df5671c1866ec37b3be8ce47861380baabd85db
-
SHA256
18fc87ef4aebbbafcb67a86bc2d27c6ea840aa25339d92bea422a01fb4a4f40f
-
SHA512
ff34e9419f70cf9df49d786cb37ae622b75f1c84c1b3ec42ab5d33d610009b67484e58e77f81375e0896167f5c27955856d76d8398e71abd4a40837662ad59c2
-
SSDEEP
768:GLg3VfDicsdK4N2+i3tza8ckWsb8c+jWMDW4VJ7BZQkzJDalKkjx+T:g0Icr4+5a8cNLHfJLQkN2/cT
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
89.190.156.227:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0ae5f1507bb3ac39ab8414fd17c2add04e24a69242c29b4848b698b173e0bf66.elf family_gafgyt -
Gafgyt family
Files
-
0ab61c6d4ae458dd3c367cee58e91a1f.bin.zip
Password: infected
-
0ae5f1507bb3ac39ab8414fd17c2add04e24a69242c29b4848b698b173e0bf66.elf.elf linux mipsbe