Behavioral task
behavioral1
Sample
b596267b511c3abe6f77ba3689118f75da34b83b1f8cb20ad84488d107603a94.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
e427e2a9cd17c746d8aa085aeee7b80a.bin
-
Size
47KB
-
MD5
f0eee0b0c8a9f9dbb2943dba591b5e40
-
SHA1
da9d676a729e4e589ea9f15b99a8e450c33b5b55
-
SHA256
c3de710a0c1a05f64cd0e48408fd3fe530e32955b2d6860efee255eefbc8f6f3
-
SHA512
1e6c31db97f8215d4fbf0f356d96fa26373cfc083474f26d56628efda20a2550c921403e793946b670a792b11e6c6e3b13281e0622cae7b01f14a7f8370e067e
-
SSDEEP
768:fAvDfVYm+mRybqwEmynos8ErZjxunNwQqg0lrVPgs3b3nxYn5Lg4P3oo5hlobz:Ivqm2qdz8uAnNwE6uubcJgbopof
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.79.48:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/b596267b511c3abe6f77ba3689118f75da34b83b1f8cb20ad84488d107603a94.elf family_gafgyt -
Gafgyt family
Files
-
e427e2a9cd17c746d8aa085aeee7b80a.bin.zip
Password: infected
-
b596267b511c3abe6f77ba3689118f75da34b83b1f8cb20ad84488d107603a94.elf.elf linux arm