Behavioral task
behavioral1
Sample
0771e287b4dfc31e682e3bab07ae68d2441e3fb6307ce496583a668b346d0a7b.elf
Resource
debian9-armhf-20240226-en
4 signatures
150 seconds
General
-
Target
1b0f47c9dfa21fbd6930b8609c2f3dca.bin
-
Size
86KB
-
MD5
e303cb7e56234787bc35c018bb16a4e2
-
SHA1
041b87e9c42ed9d9db24ea63c76a5fc2a303e2ba
-
SHA256
ffc4c845f6339dee6b14e7e5795ed9ba4dcd0ca8d724a3fb0b250c730b24c0bd
-
SHA512
f791128fafac9c730e1a879cebefc0d9f28a0448fcd3054e573bb4935a1919798e6d1e040d412a47c43e5d552a697b215c2290a5374a1363006b608ade247fc5
-
SSDEEP
1536:9Z92O9spIZVBizZiufed/BPIt3Ed8QQdC7EVvnn28s/Wm6/XFlbtSQSDkP92m0tY:4fiBizZiufojKeE5OG/1l5Jwk12m0tST
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/0771e287b4dfc31e682e3bab07ae68d2441e3fb6307ce496583a668b346d0a7b.elf family_gafgyt -
Gafgyt family
Files
-
1b0f47c9dfa21fbd6930b8609c2f3dca.bin.zip
Password: infected
-
0771e287b4dfc31e682e3bab07ae68d2441e3fb6307ce496583a668b346d0a7b.elf.elf linux arm