Behavioral task
behavioral1
Sample
9ea46b8d5ba2c7230946e54f8fd3c6171402aa0a8309422062f57f7e03270ea6.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
2c99182bafffccaef0d446df4269080c.bin
-
Size
63KB
-
MD5
942292e2a32ae922dcae27f413eb4460
-
SHA1
2e9241f404448f2dcebccc59fef88a3aee40a1b2
-
SHA256
7facae11bc0c48e749c643490354a05b37b54c5ca0eac0bf2a83a0deae8168a1
-
SHA512
de3efcf1c7aa9da265f34a5672fb7c9c58861ddfa06375d8e8ce42f72ade7e0d124f28cbdf1e50c98f4f08dd41c5eccbd02c4dd3b5c3023d6a9c28ac02016c9e
-
SSDEEP
1536:iR0Ma8STMaOt3ie7Uz+Zf6B2MMy3QFfRyAARZSE8QkGqz:Gcxo3iey+ZicM7UfRyAG48qz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
206.72.202.212:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9ea46b8d5ba2c7230946e54f8fd3c6171402aa0a8309422062f57f7e03270ea6.elf family_gafgyt -
Gafgyt family
Files
-
2c99182bafffccaef0d446df4269080c.bin.zip
Password: infected
-
9ea46b8d5ba2c7230946e54f8fd3c6171402aa0a8309422062f57f7e03270ea6.elf.elf linux arm