Behavioral task
behavioral1
Sample
ee7a762e455f4e7f818b9a35152e2b03a58f170e408ff89a9136913ec55787bd.elf
Resource
debian9-mipsel-20240418-en
0 signatures
150 seconds
General
-
Target
828bf4959426a8eebc4e529520986185.bin
-
Size
50KB
-
MD5
717b1bdc47dee752c13c39940303b672
-
SHA1
5e2163dc38deebf46318d0385670e7db783f03bb
-
SHA256
4a0577b1e7e576e695baa353c918d58adf66d910d79edec3dac2f2ad45352427
-
SHA512
87f68274c52b26a9a3df974cc2a6a239a7f721287c47bd87ef99c0b692364114c9c7b92d2138c56b842b92cd0f0d6ea6e1f3d7a14842d9a325d5aff7df0b208c
-
SSDEEP
768:PnyKNe6gEgBebdVJXkxTLeWjFmbRipqM9/UVT9VAIJxb0Ngh/W52ezHEgULJEq:PCP0bdVJXkxTPjkbRic7RFO2teArB
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.79.48:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ee7a762e455f4e7f818b9a35152e2b03a58f170e408ff89a9136913ec55787bd.elf family_gafgyt -
Gafgyt family
Files
-
828bf4959426a8eebc4e529520986185.bin.zip
Password: infected
-
ee7a762e455f4e7f818b9a35152e2b03a58f170e408ff89a9136913ec55787bd.elf.elf linux mipsel