Behavioral task
behavioral1
Sample
7be3b9317f4ef9512063ddfa4766ad8ab8c00c8736f442e227dfd420339ab415.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
0204e3c61fef573450266e92ccce257f.bin
-
Size
86KB
-
MD5
7ea4ef46e633d3e3526ef9746e8dc70c
-
SHA1
6e3f39b1d68b12a38691e7a79b33d86600ee4d34
-
SHA256
97534e020e15d1c2696a352c58a303814b178be8f43943ed7eb8c5b0cf70c7b4
-
SHA512
465ea4bc298545f6720dc33b0355297adf92566454ab9374711eb92429b9f00bf76b1831e321861b46500239264cfa4cb74c619693912cb753a843a305e4c2b7
-
SSDEEP
1536:YKBrWq5KcRLIEtjYe033vlfHZHMZNH4DMNWY83Ksimay7F2VqRTjJox7kC7aH/b:YKBCq55IFeW3vN5Ep4DQM3Yy8V6PJG7I
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/7be3b9317f4ef9512063ddfa4766ad8ab8c00c8736f442e227dfd420339ab415.elf family_gafgyt -
Gafgyt family
Files
-
0204e3c61fef573450266e92ccce257f.bin.zip
Password: infected
-
7be3b9317f4ef9512063ddfa4766ad8ab8c00c8736f442e227dfd420339ab415.elf.elf linux arm