Behavioral task
behavioral1
Sample
ce262644330bbc367d5e0d4c2364e45fad9c1a5ea7ed80b4f7edfffe542d7903.elf
Resource
debian12-armhf-20240418-en
0 signatures
150 seconds
General
-
Target
576b41e887299a4aad2cc4d8800aa824.bin
-
Size
82KB
-
MD5
84d61476d1c433c4dab42a0bef94f114
-
SHA1
7699ba1cdc31d1f59a2fcff80de3d971fa4b796e
-
SHA256
5335ce7af80ad0c7e35ba35e426df20dd2d412026d1fca637c150a7e127b9a8b
-
SHA512
28cdc3104e60eae5e9789f558bd5010f2889983a22099e1f27d0a913500cd0db12d3653b8a2b8063546e1caa62e758081343bec0c665e10d7ac6b3bec80bc406
-
SSDEEP
1536:PUbOQLemz8nygk0B/Z0IMKqGLcP5ao0T5ZrmMqPnbK/WYcS/emctu2:PUbOQS+8PpZ0ALe0TyXbK1Gj
Score
10/10
Malware Config
Extracted
Family
gafgyt
C2
185.196.8.31:3221
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/ce262644330bbc367d5e0d4c2364e45fad9c1a5ea7ed80b4f7edfffe542d7903.elf family_gafgyt -
Gafgyt family
Files
-
576b41e887299a4aad2cc4d8800aa824.bin.zip
Password: infected
-
ce262644330bbc367d5e0d4c2364e45fad9c1a5ea7ed80b4f7edfffe542d7903.elf.elf linux arm