Behavioral task
behavioral1
Sample
31ef6464f4798017e299af3bdb62200f93b38d85c269f8501ca8211fe91f0d5c.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
4 signatures
150 seconds
General
-
Target
0e5051b1f3d41ef27ba72a8b6f8b0029.bin
-
Size
70KB
-
MD5
199431c1b07b1a30dbc44809e23cc2cc
-
SHA1
20f900ba32e67807b8379a59fd941bb27c3d1b5e
-
SHA256
5ae5062621975a929992239a31bd99a137245aed0efa4551b0ab847a6386af5c
-
SHA512
d16d702840b441efb414e4f7455486bcf007494430a67489119c1e19ace3e8d2f1e0dcd64477b9ba3c52a35051695f58c258df4c2e44a7056089a995eb304361
-
SSDEEP
1536:bQAw1fnFumB2/dh+WZoQLZ5FLZpoH88v19Fm9tSNmXqQh54:UpfAmyVNLZnW9Fzuqs54
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/31ef6464f4798017e299af3bdb62200f93b38d85c269f8501ca8211fe91f0d5c.elf family_gafgyt -
Gafgyt family
Files
-
0e5051b1f3d41ef27ba72a8b6f8b0029.bin.zip
Password: infected
-
31ef6464f4798017e299af3bdb62200f93b38d85c269f8501ca8211fe91f0d5c.elf.elf linux mipsel