Behavioral task
behavioral1
Sample
9999915b28a49d7660b18be313ecba81177a0c005aed62e8e5c2d30ec89eb041.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
ad4dc3cf898e90ce3fe9adc66c1ea722.bin
-
Size
44KB
-
MD5
049ded887752dcf0e210e90fc080f425
-
SHA1
3b348341c621be3baa8c946c84bbf05cfbcb58d2
-
SHA256
20fd26d69e5f7718c6b9d102c4eb6b7011130bfbde351fccdcf070b2bcb3ef50
-
SHA512
42728f9682c7d57b4f12dda00ff7700dc2a3ea28428e1798ed2a5b5710ac9240cdf238cef33ef507acf7ac757841cd239c3b1981c5f715bd2281113287fdd22a
-
SSDEEP
768:+gb6imRBkY7KEbbsF0G96oVdjgNPiLYr+OM4gkcfuQLVs:+4CXkNEHsLzbpLYyOM4gkczVs
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.8.9:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/9999915b28a49d7660b18be313ecba81177a0c005aed62e8e5c2d30ec89eb041.elf family_gafgyt -
Gafgyt family
Files
-
ad4dc3cf898e90ce3fe9adc66c1ea722.bin.zip
Password: infected
-
9999915b28a49d7660b18be313ecba81177a0c005aed62e8e5c2d30ec89eb041.elf.elf linux arm