Behavioral task
behavioral1
Sample
9a25f440c5522db6ab21abef6692be4ac4a0b35feeecdcddfdac7f5c4d7278f2.elf
Resource
debian9-armhf-20240226-en
3 signatures
150 seconds
General
-
Target
353b63fb2faeeeb5820072ca55b8479b.bin
-
Size
56KB
-
MD5
461139aff4451f6642cecc3cfc3ba2c3
-
SHA1
b9ded31784b54a08938655e48f5837f34b6cba3e
-
SHA256
d7d64588c766de5945cea53b9dd60e935c4078f6d58929bec4e90503d40154b3
-
SHA512
4677950925075038733ba0b856be3fb8d722ae1fab952e487128a32d480269fc8546c75a08e5d94d1ce933b2dfd2efbac5d994c8c47790bd6678248647a9e606
-
SSDEEP
1536:xz63RIo8WTUUYPJC58UogP4ZPXLtAhva+RG:x+3VAUWJqogQSvy
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
85.239.55.70:515
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9a25f440c5522db6ab21abef6692be4ac4a0b35feeecdcddfdac7f5c4d7278f2.elf family_gafgyt -
Gafgyt family
Files
-
353b63fb2faeeeb5820072ca55b8479b.bin.zip
Password: infected
-
9a25f440c5522db6ab21abef6692be4ac4a0b35feeecdcddfdac7f5c4d7278f2.elf.elf linux arm