Behavioral task
behavioral1
Sample
8db7d658a9d3e808811ac5b756b693722141256ff47f05286eb9c5058c6b1f07.elf
Resource
debian12-armhf-20240221-en
0 signatures
150 seconds
General
-
Target
d2f321754fcd30b4c08bfb70249a2904.bin
-
Size
64KB
-
MD5
a54987dcb3fcbf4659a933494486e7c6
-
SHA1
3356971359bdd7b12964b7d90c4bba7329b08ebc
-
SHA256
896b9e910da1c36b955b0ee0760248e1f35384aaee6fea5a27cd6446cbcb7893
-
SHA512
7f0d78d192dd559a7fca2a8369b325bcb1b6416c240bf1a6204666e0d447d570de168460773debdabd16167c55c59f04c6abb2c6d6fd1fdb7050358f5e104355
-
SSDEEP
1536:dKCHSPLp+LCmYowqvz8MIdpkMo3bG3mo3ephxSDNs2uSF17:dKCcp+mmYuW+M4bG3mo3Q8Ns1Sr7
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
5.253.246.39:666
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/8db7d658a9d3e808811ac5b756b693722141256ff47f05286eb9c5058c6b1f07.elf family_gafgyt -
Gafgyt family
Files
-
d2f321754fcd30b4c08bfb70249a2904.bin.zip
Password: infected
-
8db7d658a9d3e808811ac5b756b693722141256ff47f05286eb9c5058c6b1f07.elf.elf linux arm