Behavioral task
behavioral1
Sample
8f37bc267d056e1b9dcf869db2b22214af5dac29e5bf4252ebf92e9e17a9f660.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
9cadc37aca9c336d9405035345e77eed.bin
-
Size
86KB
-
MD5
0b2f78f075bbe3f2761993e290f02957
-
SHA1
a64343e991fa021787e778b981b447b328ae316d
-
SHA256
b5331eb991ffefe76bfdd7fa130d8fdc554c8d812730b07ebee51591c1bf2bb8
-
SHA512
76bbe18d8d23013eb75a09a23332ae97b1c6d5e11a170a30befc3cd5ab682edac6fc890137219ab46fa8041883e7d88f926f606b1111eb0fc1693d4ae26b2752
-
SSDEEP
1536:f3SZ/pdt5Tke7+tuFeMLnvD5HRIXhiPy/i3wQob9SGNi8YtMMo6SA:fiZhdtJiuJLnvD5HRvPyK3wz9VZUB
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
2.58.95.131:65481
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8f37bc267d056e1b9dcf869db2b22214af5dac29e5bf4252ebf92e9e17a9f660.elf family_gafgyt -
Gafgyt family
Files
-
9cadc37aca9c336d9405035345e77eed.bin.zip
Password: infected
-
8f37bc267d056e1b9dcf869db2b22214af5dac29e5bf4252ebf92e9e17a9f660.elf.elf linux arm