Behavioral task
behavioral1
Sample
7a212ece6ec006f7e81a93480ce01ac4dfe80d1270fd45c9188f49ab3e1dbff4.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
c5c7b4a67e0a75d1fae106dcb185cd9a.bin
-
Size
68KB
-
MD5
3012d938a87d2b0235a8455ecd2436e7
-
SHA1
ab1438462d1ab3439f2fadb51493e1c1a3d2ad62
-
SHA256
ad6407ef316d7b66fe222125376ab1abc8a510b9f2a02793f3cefa3c07da2b56
-
SHA512
9e9140427e2e4ad7e95caa337de516038ccfe144706de73397061b86eebe497a5726b472788dbc909d9882acf8592b96d8fe1568ebde24916851cf2ebb1b544d
-
SSDEEP
1536:VL6nrUxaoLRdEbT9psPuz3ECyH8g5vEktUquPmj7OdXM6QAi1Egs6fXU:VenAxnCpsPuz3ECyHXntUc72XfH6c
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7a212ece6ec006f7e81a93480ce01ac4dfe80d1270fd45c9188f49ab3e1dbff4.elf family_gafgyt -
Gafgyt family
Files
-
c5c7b4a67e0a75d1fae106dcb185cd9a.bin.zip
Password: infected
-
7a212ece6ec006f7e81a93480ce01ac4dfe80d1270fd45c9188f49ab3e1dbff4.elf.elf linux arm