Behavioral task
behavioral1
Sample
ce1d362ec56fca9dc8d4dba765540b9f2187e956b002ef0bd763424169b20948.elf
Resource
debian9-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
4785f69e5d94ca1865d525ad11c06b7d.bin
-
Size
82KB
-
MD5
eea5d1fd8ec1265d600f24e4a878fbdd
-
SHA1
14915d1953b9d83e3b3e58515c84d121046064fd
-
SHA256
4c6362e879f71bdd4bf5c40b9b72fc76eff8c675e8587b66b933b1223df3ce9b
-
SHA512
0e580cb55e91d99e58860fbaf245f4076aa150f8101d99ef44193a773dd88baf496489d871813f15f633441d85aad6410c90c139b79f5c0cb4e99b9fa763ec8b
-
SSDEEP
1536:N1eriTEFqFBUHm2yTtEGUgfhpprbqAyzDVR3IIQa+MiAGt9GM:N1GiQF/Hm2g9fZrbq5kmKAGz
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.196.8.31:3221
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ce1d362ec56fca9dc8d4dba765540b9f2187e956b002ef0bd763424169b20948.elf family_gafgyt -
Gafgyt family
Files
-
4785f69e5d94ca1865d525ad11c06b7d.bin.zip
Password: infected
-
ce1d362ec56fca9dc8d4dba765540b9f2187e956b002ef0bd763424169b20948.elf.elf linux arm