Behavioral task
behavioral1
Sample
8eecaf1ab4624a338966d7c9dfc610976447d5355dba82dc8f5eebd108f5e8ee.elf
Resource
debian9-mipsbe-20240226-en
4 signatures
150 seconds
General
-
Target
173cc881afdf225409318f90d7d877a2.bin
-
Size
71KB
-
MD5
095775f280feeaf74622c3135e337316
-
SHA1
eca334403937f985852292fd32d8a59eaf6335dd
-
SHA256
7ecc6061a53e7892ec41991b022842956c6b46affbefaba5d8413f323d60428e
-
SHA512
ece19d574d27ce06201fa05a1ea3e70c0f2274abdcfc32a772b43f7d89d488c483fc0aa806d4ad7948bf3907757effaeaf20163443e23fdda2919a1b3810834d
-
SSDEEP
1536:Q4LJx/VPZVlg5JQLiAAZ0/xJCZpbDg5BAmTJxE1/FVPg/nKQr:fLNPrlsAAZ0/3CTUbAmTTE1/Ftg/KQr
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8eecaf1ab4624a338966d7c9dfc610976447d5355dba82dc8f5eebd108f5e8ee.elf family_gafgyt -
Gafgyt family
Files
-
173cc881afdf225409318f90d7d877a2.bin.zip
Password: infected
-
8eecaf1ab4624a338966d7c9dfc610976447d5355dba82dc8f5eebd108f5e8ee.elf.elf linux mipsbe