Behavioral task
behavioral1
Sample
2c3455514637842ad6ed1ef0f8cd53283d26c23d65a4cb9814ad079eae877f40.elf
Resource
debian9-armhf-20240226-en
2 signatures
150 seconds
General
-
Target
81c83f27b6e88c217d634431ab7ca78c.bin
-
Size
64KB
-
MD5
d8d76a9c65eaff6a792616fd249119bc
-
SHA1
1f5e11582535347d46347d4adc8474339bfcbd16
-
SHA256
da69f362b37665fd45f38007baff5419d2c5719f75b81f97247082be44d48b28
-
SHA512
9de277af3f4d617d176d7e1e6c9691f2fcf20356990866d1219cc350792098c37bd334b7d441f22ea84c65ebd3a11d113978a713038c46d9d6b5a4ea6f15a5b3
-
SSDEEP
1536:ZqZypDLvhM+RQF+0rtI2nJB8tQ25NKN1G8KNFU0qWf2UlWGYKfD1I/K:ZqZYr2dFj2AJM58YNFN2tZuZ9
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
93.123.85.170:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/2c3455514637842ad6ed1ef0f8cd53283d26c23d65a4cb9814ad079eae877f40.elf family_gafgyt -
Gafgyt family
Files
-
81c83f27b6e88c217d634431ab7ca78c.bin.zip
Password: infected
-
2c3455514637842ad6ed1ef0f8cd53283d26c23d65a4cb9814ad079eae877f40.elf.elf linux arm