Behavioral task
behavioral1
Sample
97bee29d2c0db86d06591b449c798f2c2e1a15f8c49ce05c7db9cb0fffe6fe2b.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
f875cac4161134ccaee416e9a3739a6c.bin
-
Size
64KB
-
MD5
a4a0260136a65e33385e32272c581f65
-
SHA1
54ca8ca24ad9902d1200f2e8210d2ce9ebde31a8
-
SHA256
d069e10a4e692266c939d31946ea474ba1fd08f57ec7b797a7e8edc7332df1a6
-
SHA512
ffcd5d20259df4a06b8406ed5061a840533c7b84e24db74b84b547d1d8b8a14db2aa921836ba216c5c40f8207eac07864ca34a018797d363f4708b13888556d7
-
SSDEEP
1536:sZEQ6ZouqhlZdlTPisAbYj6H01cN6n18hWoQ0:7Qth6bG6H01au2Q0
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
94.156.79.48:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/97bee29d2c0db86d06591b449c798f2c2e1a15f8c49ce05c7db9cb0fffe6fe2b.elf family_gafgyt -
Gafgyt family
Files
-
f875cac4161134ccaee416e9a3739a6c.bin.zip
Password: infected
-
97bee29d2c0db86d06591b449c798f2c2e1a15f8c49ce05c7db9cb0fffe6fe2b.elf.elf linux arm