Behavioral task
behavioral1
Sample
ec1257c412bd00c705a1e2c4ee1c66dd203eed142fda9670492dff61c09f462d.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
ce15036218a76994844af6ca664d18be.bin
-
Size
67KB
-
MD5
6eab81cf625e9ef6d7343b4c6973d3f8
-
SHA1
634c574329edd543f3ab5454dff95e56d3c2842e
-
SHA256
75b478fe02a734ab1ff9e42b624c47c555db9a58f122c2390e8c1c725c00accb
-
SHA512
4b02e1464896806bb23229688d8401e82bcda39f7ed86a052ea1a515dcef568fd58235eb131a8792ee1e48438dd5e2e21de0eb6aed8a6bd83ca12c74893c8a74
-
SSDEEP
1536:ht6HgPrG52HQC7Ds1oTXJ8S/bMHOUbO+uf+2lLJvEcbYF:D6HgzGg7So2S/guUbpuf+2lhlE
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
147.185.221.19:30455
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ec1257c412bd00c705a1e2c4ee1c66dd203eed142fda9670492dff61c09f462d.elf family_gafgyt -
Gafgyt family
Files
-
ce15036218a76994844af6ca664d18be.bin.zip
Password: infected
-
ec1257c412bd00c705a1e2c4ee1c66dd203eed142fda9670492dff61c09f462d.elf.elf linux arm