Behavioral task
behavioral1
Sample
42237aab731e2e25005c2e491a356eaea15054064034bf80fe78578b7384e921.elf
Resource
debian12-mipsel-20240221-en
3 signatures
150 seconds
General
-
Target
f9c1f88d41c47ce26940d62f658e5eac.bin
-
Size
56KB
-
MD5
6ec491ec455b9652a39f8a99848afe3c
-
SHA1
ebb952a71203a1f0c9e264402e266c10e0dc2921
-
SHA256
996d1835d0877571fb7da43caa9c28601c8cc37e7c734f31964a8a86fccfb3a7
-
SHA512
94109592056bc17a93c86bae097d4063e70b6462285e350c247d7b341b99c285889f61c67dff3a8281c9bce3a3bb38096c5cb78f9f8d3cdea2d94c5845ab84dd
-
SSDEEP
768:ajuxprJfF+IuDIvsppysgPNYlAOlpAUNb+1TrahHSs6LNf0i9kXLMMubBn4lm6h:fxz64YpyszDAUN6shy158i9kbMMeGm6h
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
85.239.55.70:515
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/42237aab731e2e25005c2e491a356eaea15054064034bf80fe78578b7384e921.elf family_gafgyt -
Gafgyt family
Files
-
f9c1f88d41c47ce26940d62f658e5eac.bin.zip
Password: infected
-
42237aab731e2e25005c2e491a356eaea15054064034bf80fe78578b7384e921.elf.elf linux mipsel